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22  :  That  Throat  You're 
Choking  May  Be  Your  Own 

applied  insight  Lining  up  a  single  ven¬ 
dor  to  supply  most  of  your  software  seems 
easy  but  isn’t  always  smart.  With  fewer 
vendors  to  choose  from  these  days,  it’s  best 
to  hedge  your  bets.  By  Laurie  M.  Orlov 


50  How  to  Remodel 

Your  IT  Shop 

strategic  cio  The  CIO  of  home  improve¬ 
ment  retailer  Kingfisher  had  to  optimize 
operations  and  give  business  leaders  a  strong 
voice  in  IT  governance  before  he  could  inno¬ 
vate  with  technology. 

By  Jean-Jacques  Van  Oosten 


more  » 


27 


Your  Virtual  State 


virtualization  Users  are  working  hard  to  figure  out  how  far 
they  can  push  virtual  servers  without  sacrificing  application  service 
levels,  according  to  CIO’s  first  survey  on  virtualization. 

By  Laurianne  McLaughlin 

34  20-Minute  Miracles 

cover  story  |  leadership  You  have  no  time.  Here  are  20 
processes  you  can  improve,  benefits  you  can  reap  and  changes  you 
can  make  in  just  20  minutes. 

By  Stephanie  Overby  With  the  Staff  of  CIO  and  CIO.com 


42  The  Shape  of  Deals  to  Come 
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outsourcing  Consolidation.  A  rising  rupee.  Going  green. 
These  and  other  trends  are  reshaping  the  outsourcing  landscape. 
Here’s  what  to  look  for. 

By  Stephanie  Overby 
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infrastructure  management 


Turns  out  there’s  a  lot  you  can  accomplish  in  less 
than  half  an  hour.  So  much  that  we  had  more  sug¬ 
gestions  than  would  fit  within  these  pages.  Check 
outsixmoretips  that  will  helpyou  maximize 
your  return  on  everything  from  technology  to 
Job  changes.  And  try  cranking  some  tunes  whi  le 
you  read.  Accordingto  management  recruiter  and 
behavioral  scientist  Russ  Riendeau,  music  boosts 
the  productivity  of  IT  staffs. 


Top  security  threat:  human  error 
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welcome  new  hires?  Ask  them. 

&  Executive  talent  knows  no 
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►  Software  for  power  napping 

17  Essential  Technology 

Rolling  out  one  system  for  voice,  IM  and 
video  conferencing  is  a  big  project.  Still, 
more  CIOs  are  using  unified  communi-  j 
cations  systems  to  keep  colleagues  and 
customers  in  touch.  By  John  Edwards 
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[USER  MANAGEMENT] 

Who’s  Really  Running  IT? 

A  new  IT  department  is  being  born.  You 
don’t  control  it.  You  may  not  even  be  aware 
of  it.  But  your  users  are,  and  figuring  out 
howto  workwith  itwiiibethekeytoyour 
future  andyour  company's  success. 

www.cio.com/artide/28821 

[ENTERPRISE  2.0] 

When  You  Should 
Believe  the  Hype 

Jack  Santos,  an  executive  strategist  at 
the  Burton  Group,  picks  five  col  labora- 
tion  technologies  thattranscend  mere 
buzz— including  blogs  and  social  network¬ 
ing— thatyoushouldkeepon  your 
personal  “innovation  radar.” 

www.cio.com/article/183200 


[ADVICE] 

GET  REAL 
ABOUT  VIRTUAL 
MEETINGS 

Virtual  teams  may  be 
common,  but  the  old 
rules  for  running  a  meet¬ 
ing  don’t  always  apply. 
Ourtips  helpyou  getthe 
most  out  of  teleconfer¬ 
ences.  www.cio.com/ 
article/184550 
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»  Survey  Says:  Nine  consumer  technologies  CIOs  fear 
»  The  Bottom  Line:  Price  negotiations  with  vendors  don’t  pay  off 
»  Inside  Tech:  Top  10  virtualization  risks  hiding  in  your  company 
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Gather  all  your  information  in  one  plac 
Add  your  smarts,  and  yourve  got 


SIITDM 


(A  Super  Informed  IT  Decision  Maker  Who's  Super  In  Demand) 


With  a  perfect  sightline  to  your  entire  IT  portfolio  of  assets,  services,  resources  and  projects,  it's  easy  to  be  right  about  a  lot. 
CA's  approach  to  supporting  IT  governance  empowers  you  to  make  decisions,  investments  and  trade-offs  that  are  spot  on. 
The  truth  is,  people  are  drawn  to  that  kind  of  business  savvy.  But  not  to  worry,  you'll  get  used  to  all  the  attention.  Eventually. 
To  learn  more,  download  the  white  paper  "A  Matrixed  Approach  to  IT  Governance"  at  ca.com/itg. 
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Howto  Spot  a  Bad  CIO 

What  makes  a  bad  CIO?  That’s  a  question 
Senior  Editor  Meridith  Levinson  asked  CIO.com 
visitors  recently.  Many  people  joined  in  the  dis¬ 
cussion;  their  answers  are  intriguing— and  all 
over  the  map. 

One  person  argued  that  bad  CIOs  lack  a  techni¬ 
cal  background  and  formal  education  in  IT. 

Another  took  issue  with  this,  saying,  “A  techni¬ 
cal  degree  is  by  no  means  a  core  requirement.... 
A  CIO  must  be  able  to  set  direction,  understand 
enough  about  technology  to  anticipate  and  understand  new  trends,  and  relate  to 
the  business  executives  within  the  company,  [though]  I  do  believe  that  there  are 
some  CIOs  who  came  from  the  business  that  know  so  little  about  IT  that  they 
cannot  relate  to  their  staff.” 

Another  observer  declared  that  “ultimately,  the  CIO’s  performance  should  boil 
down  to  his  contribution  to  the  company’s  bottom  line.”  OK,  but  then  this  person 
adds,  “IT  is  a  cost  center,  and  a  good  CIO  will  be  conscious  about  keeping  that 
in  check.” 

A  subsequent  visitor  replied:  “This  is  why  there  are  bad  CIOs....  The  way  [many] 
companies  improve  their  IT-dollar-to-revenue  ratio  is  by  cutting  the  IT  budget 
because  nobody  outside  of  IT  understands  exactly  how  they  contribute.  [This] 
leads  to  poorer  IT  performance,  which  reduces  the  contribution  of  IT,  which  lowers 
the  IT-dollar-to-revenue  ratio,  which  leads  to  more  IT  budget  cuts  and  so  on.” 

Another  described  the  passive/powerless,  bad  CIO  scenario  this  way:  “If  busi¬ 
ness  is  always  poking  their  noses  into  IT,  guess  what. ..it’s  because  IT  has  not 
EARNED  their  trust  and  they  think  they  can  run  it  better....  It  doesn’t  matter  if 
the  incompetence  is  real  or  not....  What  good  is  the  CIO  if  he  can’t  even  give  the 
right  perception?  People  under  him  suffer  because  of  him.” 

Many  of  the  posts  focused  on  relationships:  between  the  CIO  and  the  IT  staff 
or  between  the  CIO  and  other  execs.  Bad  CIOs,  most  believe,  simply  fail  to  con¬ 
nect  to  others. 

*i  Clearly,  there  are  plenty  of  ways  to  come  up  short  as  a  CIO.  But  what  I  believe 

they  boil  down  to  is  this:  the  need  to  build  trust  and  manage  perceptions  with 
people  inside  or  outside  of  IT. 

What  do  you  think?  Why  not  join  the  conversation  at  www.cio.com  (just  search 
for  “bad  CIO”)  or  contact  me  or  Meridith  ( mlevinson@cio.com )  directly. 

Ouci 

Abbie  Lundberg,  Editor  in  Chief 

lundberg@cio.com 
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SUBTRACTION. 

Take  away  the  jungle  of  cables.  Take  away  the  so-called 
"normal"  energy  requirements  and  maintenance. 
What  do  you  have?  Introducing  the  HP  BladeSystem 
c3000.  All  the  technology  of  our  larger  BladeSystem 
in  an  efficient,  compact,  affordable  package. 

Technology  for  better  business  outcomes. 
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Efficient. 
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Are  You  Green? 

A  talk  with  Michael  Dell  about  energy  efficiency 


As  an  undergraduate,  I  majored  in  envi¬ 
ronmental  science,  so  I  was  looking  forward  to 
hosting  a  conversation  with  Michael  Dell  at  CIO 
magazine’s  first  annual  IT  Energy  Efficiency 
Summit  several  weeks  ago  in  Washington,  D.C. 

Here  are  key  takeaways  from  that  conversation 
that  can  help  your  green  computing  strategy: 

Get  your  CEO  on  board.  The  topic  of  energy 
efficiency  feels  good  and  has  high  visibility  in 
executive  boardrooms,  but  it’s  hard  to  translate 
into  corporate  strategy.  Your  CEO  must  be  personally  engaged  in  developing  that 
strategy.  A  top-down  strategy  works  better  than  a  bottom-  or  middle-up  one. 

Start  with  your  data  center.  Consolidating  data  centers  and  aggressive  virtu¬ 
alization  plans  are  logical  first  steps.  Deputy  Assistant  Secretary  of  Energy  Effi¬ 
ciency  at  the  U.S.  Department  of  Energy,  David  E.  Rodgers,  reminded  the  summit 
audience  that  power-hungry  data  centers  use  1.5  percent  of  the  energy  consumed 
in  the  United  States.  He  warned  that  we  need  to  fix  this  problem  within  15  years. 

A  key  to-do  when  consolidating  those  data  centers  is  to  make  sure  the  IT  and 
facilities  departments  are  on  the  same  page,  understand  the  metrics  that  are  being 
used  to  measure  the  savings  and  have  ironed  out  a  way  to  share  those  savings. 

Be  bold.  True  energy  conservation  is  not  a  project  for  just  one  quarter  or  one 
fiscal  year.  Michael  Dell  pledged  5  months  ago  that  Dell  would  be  a  “carbon  neutral” 
global  firm  by  the  end  of  2008  (meaning  they  offset  greenhouse  gases  from  their 
operations).  He  reported  that  they  are  reaching  that  goal  ahead  of  schedule. 

Don’t  forget  your  suppliers  and  partners.  Michael  Dell  and  Albert  Esser, 
the  vice  president  of  Dell’s  data  center  infrastructure,  shared  the  importance  of 
holding  your  supply  chain  or  procurement  partners  to  the  same  green  computing 
parameters  you  have  at  your  firm. 

Cost  savings  was  the  primary  driver  of  implementing  green  IT  strategies,  followed 
somewhat  distantly  by  shareholder  or  regulatory  pressure. 

Several  months  ago  I  traveled  to  China  with  my  daughter.  On  a  shopping  spree 
she  purchased  a  white  overcoat.  When  I  asked  her,  “Why  white?  It  will  get  dirty,” 
she  said,  “Dad,  white  is  the  new  black.”  Green  is  the  new  black  in  corporate  com¬ 
puting.  I  encourage  you  to  follow  the  example  of  firms  like  Dell  and  make  IT  energy 
efficiency  a  strategic  pillar  of  your  organization. 


Gary  Beach,  Publisher  Emeritus 

gbeach(a>cio.com 
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Grow  your  enterprise 

without  outgrowing  your  storage. 

In  the  enterprise,  data  protection  means  more  than  just  backing  up  data.  It 
means  safeguarding  massive  amounts  of  information  globally  -  all  while 
navigating  complex  internal  and  regulatory  requirements.  That's  why  the 
world's  largest  enterprises  rely  on  SEPATON  virtual  tape  library  (VTL)  and 
data  deduplication  solutions.  SEPATON's  ContentAware™  approach  helps  en¬ 
terprises  to  reduce  risk  and  improve  operational  efficiency  in  the  data  center. 


Learn  how  SEPATON  can  scale  to  meet  your  enterprise  data  protection 
needs.  Visit  www.SEPATON.com/scale.  Or  call  866. SEPATON. 


SEPATCN' 
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Proven  Success 

SAS  and  Lilly 


“With  SAS*  software,  we  can  focus  on  regulatory  compliance 
today  -  while  moving  healthcare  forward  for  tomorrow.” 

Michael  C.  Heim 

Vice  President,  Information  Technology,  and  Chief  Information  Officer 

Eli  Lilly  and  Company 


Find  out  how 

www.sas.com/breakthroughs 
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Cut  Cables  Raise  Questions 


internet  The  undersea  cables 
that  carry  the  Internet’s  traffic  were 
out  of  sight  and  out  of  mind  for  most 
IT  leaders  until  a  recent  series  of 
mishaps  focused  attention  on  their 
potential  to  disrupt  global  commerce. 

The  first  cables  broke  in  the  Medi¬ 
terranean  on  Jan.  30;  two  more  were 
disrupted  in  early  February  in  the 
Persian  Gulf.  Internet  access  in  the 
Middle  East  was  hardest  hit;  India, 
South  Asia,  the  U.S.  and  Europe  also 
experienced  slowdowns  as  service 
providers  rerouted  traffic.  Initial 
news  reports  speculated  the  dam¬ 
age  was  caused  by  ships  dropping 
anchor  and  accidentally  cutting 
the  lines.  Sabotage  was  considered 


unlikely.  However,  the  rash  of  inci¬ 
dents  raises  questions  about  the 
vulnerability  of  the  Internet’s  infra¬ 
structure  and  serves  as  a  reminder 
of  the  importance  of  contingency 
planning. 

Global  IT  leaders  and  their  ven¬ 
dors  quickly  responded  by  activating 
contingency  plans  to  mitigate  the 
potential  effects  of  the  disruption  as 
word  spread  that  bandwidth  in  India 
had  been  cut  in  half  after  the  Medi¬ 
terranean  cables  were  cut  on  Jan.  30. 

“We  were  able  to  route  traffic 
through  Hong  Kong,”  says  Steve 
Bandrowszak,  CIO  of  Nortel.  As  a 
result,  the  $11.4  billion  telecom  pro¬ 
vider— which  Continued  on  Page  12 
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New  Google  Apps  Bypass  IT 


software  IT  managers  who  fret  about  employees 
using  unauthorized  software  at  work  have  something  new 
to  worry  about:  a  new  edition  of  Google’s  hosted  applica¬ 
tions  suite  that  end  users  can  bring  into  the  office  without 
the  help  of  the  IT  department.  Google  Apps  Team  Edition 
is  for  employees  who  are  interested  in  using  Google  Apps 
but  whose  employers  haven’t  signed  up  for  it,  says  Rajen 
Sheth,  Google  Apps  senior  product  manager. 

Team  Edition  contains  the  core  communication  and 
collaboration  services  and  applications  from  other 
editions  but  not  Gmail,  which  requires  IT  to  reroute  a 
company's  e-mail  flow. 

More  than  500,000  smaller  organizations  have  signed 
up  for  Google  Apps.  Other  versions  require  IT  to  imple¬ 
ment  the  suite  because  services  are  linked  to  an  organi¬ 
zation's  Internet  domain.  With  Team  Edition,  workers  can 


set  up  Google  Apps  workgroups  if  they  have  valid  e-mail 
addresses  with  their  organizations'  domains. 

IT  departments  shouldn’t  get  angry  about  Team  Edi¬ 
tion,  says  Sheth,  as  it  does  provide  a  path  to  IT-manage- 
able  versions.  "The  IT  department  always  has  the  option 
to  sign  up  for  the  Standard  Edition  for  free  if  they  want  to 
provide  control  over  this,”  he  says. 

Team  Edition  fits  Google’s  strategy  of  appealing  to 
individuals  and  will  boost  adoption  of  Google  Apps  in 
organizations  that  don’t  yet  use  it,  says  Gartner  ana¬ 
lyst  Matt  Cain.  Still,  Google  needs  to  strike  a  balance 
between  rallying  end  users  and  giving  IT  managers  some 
control.  "Google  will  encourage  end-user  adoption,  but  it 
can’t  disintermediate  the  IT  staff,  which  will  have  to  ulti¬ 
mately  clean  up  any  mess,”  says  Cain. 

-Juan  Carlos  Perez 
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I  Indian  Firms  Take  Aim  at 

Infrastructure  Management 

outsourcing  India's  outsourcers  have  a  new  target:  the 
market  for  remote  infrastructure  management  services  (IMS). 

Indian  outsourcers  already  handle  a  large  share  of  outsourced 
application  development  and  maintenance  and  are  dominant  in 
business  process  outsourcing.  Now,  they  are  planning  to  more 
than  double  revenue  from  IMS  to  $15  billion  by  2013. 

IMS  involves  managing  an  enterprise’s  core  IT  systems,  includ¬ 
ing  hardware,  software  and  people.  The  industry  is  moving  toward 
a  remote  delivery  model  where  services  are  delivered  from  low- 
cost  locations  by  service  providers  and  wholly  owned  services 
subsidiaries  of  user  companies,  according  to  India’s  National 
Association  of  Software  and  Service  Companies  (Nasscom). 

U.S.  and  European  customers  are  increasingly  willing  to  out¬ 
source  IMS  to  offshore  locations  because  the  data  does  not  move 
out  of  the  home  countries  and  is  only  managed  remotely,  says 
Siddharth  Pai,  a  partner  and  managing  director  at  sourcing  con¬ 
sultancy  Technology  Partners  International. 

In  India,  IMS  business  is  going  both  to  Indian  outsourcers  and 
the  Indian  operations  of  large  IT  services  companies,  Pai  says. 
Because  of  the  large  staff  component  involved  in  IMS,  there  are 
cost  benefits  in  outsourcing  IMS  to  low-cost,  offshore  locations  like 
India,  he  adds/ 

Research  done  by  management  consultancy  McKinsey  for 
Nasscom  suggests  that  the  IMS  business  could  generate  between 
325,000  to  375,000  jobs  in  India  by  2013,  as  70  percent  to 
75  percent  of  the  roles  in  IMS  can  be  moved  offshore.  Low-cost 
locations,  including  India,  have  so  far  captured  a  mere  $6  billion 
to  $7  billion  of  the  IMS  opportunity. 

-John  Ribeiro 


To  Error  Is  Human 


security  Human  error  tops  the  list  of  security  threats,  according 
to  a  survey  by  consultancy  Deloitte  of  more  than  100  technology, 
media  and  telecommunications  companies  worldwide.  What  concerns 
companies  most?  Misbehaving  employees:  91  percent  say  possible 
employee  misconduct  related  to  information  systems  worries  them. 


Key  Causes  of  Security  Failures 

Human  error 


Operations  lapses 
Technology  lapses 

28% 

Problems  with  third  parties 

SOURCE:  Deloitte 


48% 

48% 


75% 
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Cables 

Continued  from  Page  11 

has  a  technology  center  of  excellence  in 
Bangalore,  satellite  operations  in  several 
other  Indian  cities  and  outsourcing 
partnerships  with  Wipro,  Tata  Con¬ 
sultancy  Services  and  Infosys— experi¬ 
enced  no  business  disruption. 

For  most  IT  leaders,  the  cable  breaks 
were  a  watching- and-waiting  game. 

Bill  Maguire,  CIO  of  Virgin  America, 
monitored  the  airline’s  traffic  and  per¬ 
formance  the  minute  he  heard  about  the 
problem,  but  saw  no  impact.  John  Sta- 
dick,  director  of  IT  at  Sunbelt  Rentals, 
a  construction  equipment  rental  com¬ 
pany,  was  also  on  alert.  Sunbelt’s  parent 
company,  Ashtead  Group,  is  based  in 
the  U.K.  and  runs  a  private  trans-Atlan¬ 
tic  link  to  usher  data  traffic  between  the 
U.S.  and  London.  When  Stadick  heard 
about  the  India  problem,  he  had  his 
network  manager  put  automated  traffic 
monitors  on  the  Atlantic  lines  “just  to 
be  safe,”  he  says.  “We  don’t  send  a  huge 
amount  of  traffic  through  it,  but  it’s  still 
a  vital  link  back  to  our  parent  company.” 

Ultimately,  no  major  disruptions 
related  to  India’s  decreased  bandwidth 
were  reported.  “India  has  redundant 
connections  to  the  rest  of  the  world,” 
says  Dean  Davison,  vice  president  of 
marketing  and  research  for  offshore 
outsourcing  consultancy  NeoIT.  “Ten 
years  ago,  this  would  have  been  a  big 
problem  (for  India).  Countries  that  were 
impacted  the  most  only  have  one  major 
link  to  the  rest  of  the  world.  I  don’t  think 
that  it  was  much  news  for  India,  but  it 
was  a  very  big  deal  for  the  Middle  East.” 

Experts  say  such  events  should  have 
little  impact  if  companies  have  planned 
properly.  “This  does  serve  as  a  reminder 
to  conduct  due  diligence  and  ensure 
disaster  recovery  and  redundancy  plans 
are  in  place,”  says  Cliff  Justice,  managing 
director  of  globalization  for  outsourcing 
advisory  EquaTerra. 

-Stephanie  Overby 
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How  Well  Does  Your  IT  Shop 
Welcome  New  Hires?  Ask  Them. 
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MANAGEMENT  Want 

to  find  out  what  new 
employees  think  of  your 
IT  department?  Just  ask 
them,  says  Direct  Energy 
CIO  Kumud  Kalia. 

Kalia  takes  20  minutes 
to  meet  with  all  the  people 
he’s  hired  in  the  past  90 
days  to  ask  them  for  their 
observations  while  they’re 
still  fresh.  It’s  a  trick  he 
picked  up  from  executives 
at  a  previous  company 
and  implemented  once  he 
entered  the  C  suite. 

Kalia  likes  to  use  this 
informal  group  meeting  to 


get  real-time  feedback  on 
the  company’s  on-boarding 
process,  to  find  out  what 
the  newest  employees 
think  of  the  work  environ¬ 
ment  and  ask  them  how 
they’ve  interacted  thus  far 
with  colleagues,  business 
partners  and  custom¬ 
ers.  He  also  likes  to  pick 
their  brains  about  how 
Direct  Energy  compares 
to  other  companies.  “This 
is  good  for  breaking  down 
old  myths  that  support 
grass-is-greener  kind  of 
views  [that  can  crop  up],” 
says  Kalia.  “We  can  also 


get  some  insight  into  best 
practices  we  haven’t  con¬ 
sidered.” 

This  kind  of  informa¬ 
tion  has  a  short  shelf 
life;  employees  forget 
their  early  experiences 
once  they’re  settled.  New 
employees  obviously 
won’t  want  to  be  too  harsh, 
“but  it  is  possible  to  get 
at  the  truth  without  overt 
criticism  of  coworkers  [or] 
the  company,”  says  Kalia. 

He’s  let  the  practice  slide 
as  his  time  has  become 
tight,  but  he  intends  to 
reintroduce  it  this  year. 


“I’ve  noticed  a  few  new 
faces  around  and  think  it’s 
a  little  sad  that  I  don’t  rec¬ 
ognize  everyone,”  he  says. 
“This  will  help  connect  me 
to  new  staff.  It’s  important 
that  employees  have  met 
with  their  department 
head  and  feel  like  they  have 
a  relationship.” 

Read  “20-Minute  Mir¬ 
acles,”  Page  30,  for  more 
ideas  to  improve  your  IT 
department,  your  tech¬ 
nology  knowledge,  your 
career  and  your  relation¬ 
ship  with  the  business. 

-Stephanie  Overby 


Talent  Knows  No  Boundaries 


on  the  move  The 

New  York  Times  recently 
noted  the  growing  num¬ 
ber  of  American  compa¬ 
nies  hiring  foreign-born 
CEOs  and  predicted  this 
trend  would  permeate 
the  rest  of  the  C  suite. 

Executive  recruiters  at 
Korn/Ferry  International 
and  Heidrick  &  Struggles  agree  that  it 
is  happening  with  CIOs. 

“I  see  more  foreign-born  CIOs 
for  several  reasons,”  says  Mark 
Polansky,  North  American  managing 
director  of  Korn/Ferry’s  IT  Center  of 
Expertise.  “Number  one  is  globaliza¬ 
tion,  I  also  thinkthat  because  of  the 
overdemand  for  and  undersupply 


Phuong  Tram 


of  great  CIOs,  American 
companies  will  have  to  look 
further  afield.” 

Indeed,  Gerry  McNa¬ 
mara,  managing  partner 
of  FHeidrick’s  CIO  practice, 
says  clients  are  “agnostic” 
when  it  comes  to  talent. 
“They  want  the  best  glo¬ 
bally,”  he  says.  Clients  don’t 
care  where  his  firm  finds  candidates; 
they're  willing  to  expatriate  them 
to  the  United  States.  Case  in  point: 
Dupont  named  Singapore-born 
Phuong  Tram  its  CIO  in  December. 

So  what  does  globalization 
mean  for  American  IT  executives? 
They  need  to  demonstrate  cultural 
sensitivity  and  have  global  work 


experience  on  their  resumes,  says 
Polansky.  Fie  suggests  they  volun¬ 
teer  for  assignments  overseas  and 
work  closely  with  foreign  business 
units.  "There  are  lots  of  companies 
in  America  where  you  can’t  get  into 
the  C  suite  without  an  international 
assignment,”  he  says.  "That’s  been 
true  for  a  while  but  it’s  become  more 
of  a  reality  in  the  Fortune  1000.” 

Meanwhile,  U.S.  CIOs  have  more 
opportunities  to  parlay  their  experi¬ 
ence  abroad.  Last  fall,  British  Petro¬ 
leum  tapped  Dana  Deasy  as  its  CIO. 
“The  opportunity  will  be  greater  for 
American  CIOs  who  have  the  size, 
scope  and  complexity  experience 
and  want  to  work  overseas,”  says 
McNamara.  -Meridith  Levinson 
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Read  Meridith  Levinson’s  MOVERS  AND  SHAKERS  blog  for  the  latest  moves.  Find  it  at  blogs.cio.com. 
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When  You  Want  to 
Sleep  on  the  Job 


productivity  No  more  counting  sheep  when  it’s 
power-nap  time:  New  software  called  Pzizz  plays  a  mix  of 
words,  music  and  sound  effects  to  send  you  off  to  dream¬ 
land  and  return  you  to  work  in  a  more  productive  state. 

Sleeping  on  the  job  is  typically  frowned  upon,  but 
studies  have  shown  that  15-minute  or  20-minute  power 
naps  can  dramatically  improve  employees’  focus  and 
productivity  levels.  But  many  workers  also  don’t  tap  into 
office  power  naps  because  they  can’t  quickly  doze  off, 


then  wake  up  fresh  and  ready  for  action.  That's  where 
Pzizz  Energizer  software  comes  in. 

The  software  was  developed  by  a  former  British  spe¬ 
cial  forces  agent  to  get  the  most  out  of  the  little  time  he 
had  to  sleep,  according  to  maker  Brainwave  Enterprises. 
Pzizz  uses  identical  phrases  to  start  and  end  every  nap. 
The  idea:  Use  a  familiar  identifying  sound  to  help  the 
conscious  mind  associate  it  with  sleep  or  rest,  then 
keep  the  subconscious  active  via  randomly  generated 
music  and  sounds,  like  ocean  waves  and  birds  chirping. 
The  software  uses  an  algorithm  to  create  10-minute  to 
90-minute  naps,  and  it  can  come  up  with  billions  of  com¬ 
binations  of  sounds.  An  alarm  rings  at  the  end  to  make 
sure  users  don’t  drift  into  a  deep  slumber.  An  iTunes-like 
interface  sets  napping  parameters,  such  as  whether  a 
user  wants  to  hear  constant  spoken  phrases— "Working 
hard  and  relaxation  go  together”— or  only  at  the  start  and 
finish.  Pzizz  is  different  from  other  recordings  or  napping 
techniques  because  it  uses  Neuro-Linguistic  Program¬ 
ming,  or  the  effects  of  specific  patterns  of  language,  to 
maximize  the  restfulness  level  achieved  in  short  periods 
of  time,  the  company  says. 

So  the  next  time  you  see  an  employee  or  coworker 
with  earbuds  sleeping  at  his  desk,  don’t  jump  to  conclu¬ 
sions.  He  could  simply  be  trying  to  be  more  productive. 

-Al  Sacco 


For  70  years,  Kennametal’s  operational  excellence  has  made  us  a 
powerful  leader  in  the  design,  manufacture,  and  supply  of  cutting 
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With  more  than  14,000  employees  operating  in  60  countries,  our 
achieved  momentum  delivers  best-in-class  manufacturing  and 
technology,  significantly  improving  the  competitiveness  of  all  those 
we  serve.  Our  annual  revenues  of  almost  $2.5  billion  are  proof 
positive  of  our  global  impact. 


Our  Global  IT  Team  helps  standardize,  simplify,  and  innovate 
the  way  Kennametal  does  business! 
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Make  no  mistake: 

Rolling  out  one 
system  for  voice, 

I M  and  video 
conferencing 
is  a  big  project. 
Still,  more  CIOs 
are  using  unified 
communications 
systems  to  keep 
colleagues  and 
customers 
in  touch. 


Constant  Contact 

BY  JOHN  EDWARDS 


COMMUNICATIONS  |  Robert  Fort,  CIO  of  music  retailer  Virgin  Entertainment  Group, 
would  have  liked  to  wave  a  magic  wand  to  give  key  employees  the  ability  to  easily  transi¬ 
tion  between  voice,  instant  messaging  and  video  conferencing  technologies.  His  practical 
answer:  a  unified  communications  environment.  By  providing  an  integrated  version  of  all 
those  services,  unified  communications  gives  selected  Virgin  executives,  store  managers, 
administrative  employees  and  IT  staffers  the  ability  to  reach  colleagues  wherever  they  may 
be,  with  whatever  communications  mode  is  most  appropriate.  “There  are  major  cultural 
differences  between  employees,  so  it’s  critical  to  have  good,  strong  communications  across 
the  corporation,”  Fort  says. 

Like  Fort,  a  growing  number  of  CIOs  are  seeking  to  merge  disparate  communications 
modes  into  one  universally  accessible  service.  As  communications  options  proliferate, 
employees  increasingly  face  the  choice  of  juggling  multiple  communications  devices  or 
potentially  missing  critical  calls  and  messages.  But  using  IP  technology,  vendors  such  as 
Microsoft,  Cisco  Systems  and  Mitel  promise  to  keep  enterprise  employees  and  customers 
better  connected. 

“Unified  communications  solutions  allow  enterprises  to  leverage  the  vertical  com¬ 
munications  applications  they’re  already  using,  such  as  desktop  phones,  mobile  phones 
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and  messaging  systems,  but  which  can’t 
talk  to  each  other,”  says  Nora  Freedman, 
a  senior  research  analyst  at  IDC  (a  sister 
company  to  CIO’ s  publisher.)  “Unified 
communications  is  designed  to  bring 
all  of  these  disparate  technologies  into 
an  environment  that  reduces  time 
and  effort.” 

While  the  unified  communications 
concept  has  been  batted  about  for  more 
than  a  decade,  it’s  finally  becoming  prac¬ 
tical  thanks  to  the  growing  adoption 
of  IP  telephony,  says  Mark  Cortner,  a 
senior  analyst  at  Burton  Group.  Compa¬ 
nies  that  have  adopted  IP  telephony  are 
already  in  the  on-ramp  to  unified  com¬ 
munications,  he  notes.  “Now  that  your 
voice  communications  is  in  IP,  it  joins 


messaging,  e-mail  and  other  forms  of 
IP-based  communications,  all  of  which 
can  be  directed  and  managed  in  unison 
over  data  networks,”  he  says.  “This  is 
what’s  at  the  heart  of  the  growing  inter¬ 
est  in  unified  communications.” 

But  as  Fort  and  his  peers  have  found, 
deploying  unified  communications  and 
making  all  the  pieces  work  together  is  a 
time-  and  testing-intensive  job  for  IT. 

Fewer  Misses, 

Better  Meetings 

Based  in  Los  Angeles,  Virgin  Enter¬ 
tainment  Group,  under  the  Virgin 
Megastores  USA  brand,  operates 
11  outlets  in  New  York,  California, 
Florida,  Colorado  and  Texas.  Facing 
business  challenges  posed  by  big-box 
music  retailers,  such  as  Best  Buy  and 
Wal-Mart,  as  well  as  the  popularity  of 
online  music  downloading  services,  like 
iTunes,  Virgin  needs  to  run  a  tight  and 


efficient  organization  that  keeps  sales 
high  and  prices  down.  Unified  com¬ 
munications  supports  those  goals,  Fort 
says,  while  helping  employees  in  several 
different  ways. 

Presence  technology,  for  example, 
shows  whether  a  person  is  available  to 
receive  a  call.  “If  it’s  urgent,  you  might 
decide  to  send  the  individual  an  IM 
instead,”  Fort  says.  During  live  meet¬ 
ings  or  conference  calls,  participants 
can  get  fast  answers  to  questions  from 
colleagues  in  the  same  building,  or  in  a 
store  on  the  opposite  coast,  by  contacting 
them  via  IM  or  voice.  Employees  can  also 
tap  into  their  computers  to  share  spread¬ 
sheets,  charts  or  other  relevant  data  with 
conference  participants.  “You’ve  got  the 


capability  of  making  the  best  choice  of 
who  to  contact  and  how  to  contact  them,” 
Fort  says.  ‘After  a  while,  it  just  becomes  a 
very  seamless,  natural  way  of  exchang¬ 
ing  information.” 

Virgin  began  exploring  the  possi¬ 
bility  of  adding  unified  communica¬ 
tions  shortly  after  deploying  a  Cisco 
Systems-based  IP  phone  system  on  its 
network  in  2005.  The  company  initially 
considered  utilizing  the  Cisco  Unified 
Communications  environment  but 
ultimately  changed  course  and  adopted 
rival  Microsoft’s  technology.  “The  thing 
that  gave  me  more  comfort  with  the 
Microsoft  approach  is  that  I  looked  at 
it  from  the  desktop  use  [angle]  and  I 
found  that  the  Microsoft  solution  is 
so  deeply  embedded  and  integrated 
with  all  the  rest  of  our  enterprise  soft¬ 
ware,”  Fort  says.  “There  were  also  cost 
factors  in  our  case— the  Microsoft  solu¬ 
tion  was  cheaper  for  us.” 


Maximizing  Time 
With  Customers 

For  the  140-plus  lawyers  at  Bowman  and 
Brooke,  a  Minneapolis-based  law  firm 
with  offices  in  Minneapolis,  Los  Angeles, 
Phoenix,  Detroit  and  San  Jose,  unified 
communications  boils  down  to  customer 
service.  Clients  such  as  General  Motors, 
Toyota  and  Ecolab  demand  fast  answers 
to  crucial  questions,  says  Michael  Cam- 
mack,  Bowman  and  Brooke’s  CIO. 

Besides  giving  clients  access  to  key 
attorneys  at  any  time,  on  any  device  and 
in  any  place,  the  firm’s  unified  commu¬ 
nications  system  provides  key  support 
information  that  helps  attorneys  be  pre¬ 
pared  as  they  accept  an  incoming  call 
or  message. 

In  the  second  quarter  of  2008,  Cam- 
mack  plans  to  enable  a  feature  so  that 
when  an  attorney  is  using  a  computer, 
for  example,  a  screen  pop  will  tell  him 
who  is  calling  and  to  what  case  the 
call  relates. 

Using  desktop  sharing  technology, 
attorneys  and  clients  already  jointly 
view,  edit  and  annotate  documents  in 
real  time. 

“It  used  to  take  three  to  five  minutes 
just  to  get  moving,”  Cammack  says.  “I 
send  you  an  e-mail,  you  download  the 
documents,  then  you  write  back  to  me 
and  so  on.”  With  unified  communica¬ 
tions,  information  is  exchanged  in  real 
time,  interactively,  without  wasting  time 
on  procedural  matters.  “The  whole  sys¬ 
tem  saves  time  and,  ultimately,  allows 
us  to  provide  better  service,”  Cam- 
mack  says. 

Piecing  Together 
the  Puzzle 

While  most  CIOs  agree  that  unified  com¬ 
munications  can  streamline  and  expedite 
employee  and  customer  interaction,  most 
adopters  also  say  that  the  technology  can 
create  a  big  ball  of  confusion  for  IT  depart¬ 
ments.  Since  unified  communications 
involves  so  many  different  communica¬ 
tion  modes,  as  well  as  multiple  hardware 
and  software  platforms  and  applications, 


“  It’s  essential  that  everything  can 
talkto  each  other.  Otherwise,  your 
employees  will  be  the  middleware." 

-Michael  Cammack,  CIO,  Bowman  and  Brooke 
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essential  technology 


the  technology  can  rapidly  snowball  into 
the  most  complex  communications  proj¬ 
ect  an  enterprise  has  tackled.  “I  think  the 
biggest  challenge  is  that  there  are  so  many 
pieces  to  it,”  Fort  says. 

Virgin’s  deployment  required  a 
boxcar’s  worth  of  technologies,  all  of 
which  had  to  be  painstakingly  tested  for 
interoperability  under  a  variety  of  sce¬ 
narios.  The  system’s  products  include 
Microsoft  Office  Communications  Server 
2007,  the  Microsoft  Office  Communica¬ 
tor  2007  unified  communications  client 
and  Microsoft  RoundTable  conferencing 
and  collaboration  software.  Call  routing 
is  handled  by  the  Cisco  CallManager  sys¬ 
tem,  which  Virgin  installed  before  adopt¬ 
ing  unified  communications. 

At  Virgin,  the  service’s  presence  and 


instant-messaging  and  document-shar¬ 
ing  functions  required  links  to  Office 
Outlook  2007,  Office  SharePoint  Portal 
Server  and  the  Microsoft  Active  Direc¬ 
tory  Service.  The  company  equipped 
selected  users  with  the  LG  Nortel  IP 
Phone  8540,  which  supports  features 
such  as  name-based  dialing,  conference 
call  setup  and  presence  status  capabili¬ 
ties.  The  service  can  also  be  accessed 
through  laptop  computers,  Cisco  and 
BlackBerry  handsets  and  other  devices. 

Like  Virgin,  Bowman  and  Brooke 
also  uses  Office  Communications 
Server  2007  linked  into  Office  Com¬ 
municator  2007  clients.  The  law  firm 
uses  Mitel’s  Live  Business  Gateway 
to  allow  click-to-call  capabilities  from 


Microsoft  Office  Communicator  and 
soon  from  within  Office  documents.  For 
multimedia  conferencing,  the  firm  chose 
Cisco  MeetingPlace.  Then  there’s  Mitel’s 
3300  IP  Communications  Platform,  an 
IP  gateway,  to  do  IP  trunking  between 
offices;  and  Mitel’s  Teleworker  Solution, 
to  extend  office  phone  capabilities  to 
phones  located  in  remote  offices,  hotel 
rooms  and  other  locations. 

Finally,  the  Mitel  Mobile  Extension 
gives  key  attorneys  a  single  phone  num¬ 
ber  and  mailbox  for  multiple  commu¬ 
nication  devices.  “The  presence  status 
of  the  user  is  updated  no  matter  which 
device  they  are  using,”  notes  Cammack. 

Given  the  complexity  involved  in  so 
many  parts,  deploying  a  unified  com¬ 
munications  environment  demands 


patience,  diligence  and  persistence. 
Cammack  feels  that  careful  product 
selection  is  the  key  to  unified  commu¬ 
nications  success,  with  the  CIO  and  staff 
making  sure  that  platforms,  devices, 
applications  and  everything  else  inter¬ 
operate  seamlessly.  “It’s  essential  that 
everything  can  talk  to  each  other,”  he 
says.  “Otherwise,  your  employees  will 
be  the  middleware.” 

It’s  possible  to  build  a  unified  com- 


Strategy  Session 


For  more  advice  and  background,  see 

5  THINGS  YOU  NEED  TO  KNOW  ABOUT 
UNIFIED  COMMUNICATIONS  at  www 
.cio. com/article/181950. 

cio.com 


The  unified 
communica¬ 
tions  market, 
worth  $22.6 
billion  in 
2007,  will  hit 
$48.7  billion 
by  2012. 

SOURCE:  In-Stat  and  Wainhouse  Research 


munications  infrastructure  using  just  a 
single  vendor— one  that  creates,  selects 
and  tests  all  the  key  technology  itself. 
“But  if  you’re  creating  a  best-in-breed 
approach,  you  really  need  to  make  sure 
the  companies  you’re  looking  at  are 
going  to  actively  cooperate  with  the 
products  from  the  other  companies 
you’ve  chosen,”  Cammack  warns. 

Still,  Cammack  feels  that  unified 
communications’  case  is  so  compelling 
that  it’s  worth  the  effort  of  juggling  and 
interweaving  multiple  technologies  in 
order  to  achieve  lasting  productivity 
benefits.'  “You  have  to  look  at  the  end 
results,”  he  says. 

On  the  positive  side,  you  likely  won’t 
have  to  deal  with  much  user  pushback. 
Convincing  employees  to  use  the  system 
isn’t  particularly  difficult,  Virgin’s  Fort 
observes,  since  people  are  rapidly  grow¬ 
ing  accustomed  to  IP-based  communica¬ 
tions  technologies.  “You  start  to  realize 
that  most  of  your  users  are  probably 
already  using  instant  messaging,  VoIP 
and  other  technologies  at  home,”  Fort 
says.  “When  you  take  the  time  to  show 
them  that  they’ll  be  using  the  same  tools 
in  an  integrated  fashion  for  business 
benefits,  they  get  it.”  BIS 


John  Edwards  is  an  Arizona-based  freelance 
writer.  To  comment  on  this  article,  go  to 
www.cio.  com/article/181550. 


“Most  of  your  users  are  probably 
already  using  instant  messaging, 
Vol  P  and  other  technologies  at 
home.  When  you  show  them  that 
they’ll  be  usingthe  same  tools  in  an 
integrated  fashion  for  business 
benefits,  they  get  it.” 

-Robert  Fort,  CIO,  Virgin  Entertainment  Group 
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That  Throat  You’re  Choking 
May  Be  Your  Own 

Lining  up  a  single  vendor  to  supply  most  of  your  software  seems  easy 
but  isn’t  always  smart.  With  fewer  vendors  to  choose  from  these  days, 
it’s  best  to  hedge  your  bets. 

he  conventional  wisdom  is  that  it's  always  better  to 

have  fewer  software  vendors— or  even  a  single  vendor— to  manage 
than  it  is  to  use  multiple  vendors.  Now  that  there  are  only  17  large 
independent  software  vendors  left,  according  to  a  recent  Forrester 
Research  report,  it’s  a  good  time  to  reevaluate  this  closely  held  belief. 


CIOs  who  subscribe  to  the  “one-throat-to-choke” 
approach  to  vendor  management  typically  think 
about  it  in  one  of  two  ways:  Either  they  want  to  get 
the  various  company  departments  that  run  differ¬ 
ent  tools  to  agree  to  a  single  provider  or  they  want 
to  forestall  deployment  of  new  tools  until  their  big 
enterprise  vendor  supplies  them.  The  goal  is  to,  one 
way  or  the  other,  achieve  a  standard  platform  and 
make  running  IT  easier. 

But  reliance  on  a  handful  of  vendors  may  not  be  in 
your  best  interest.  This  is  especially  true  now,  when 
the  software  market  is  consolidating.  Take  the  recent 
acquisitions  of  business  intelligence  vendors  Cognos 
(by  IBM),  Hyperion  (by  Oracle)  and  Business  Objects 
(by  SAP).  IT  customers  are  waiting  anxiously  to  see 
what  the  big  guys  are  going  to  do  with  their  newly 
acquired  products.  In  the  meantime,  IT  departments 
should  hedge  their  bets. 


Why  One  Vendor  Is  a  Bad  Idea 

At  the  core  of  the  desire  for  standardization  has 
always  been  the  desire  to  optimize  IT  at  the  expense 
of  business  constituents  who  prefer  (or  believe  they 
need)  a  variety  of  tools  to  do  their  jobs.  By  reducing 
the  number  of  software  products  to  support,  limiting 
the  number  of  vendors  to  call  with  a  problem  and 
minimizing  potential  behind-the-scenes  data  com¬ 
plexity,  the  IT  job  will  be  easier  and  support  costs  will 
be  reduced.  This  may,  however,  engender  employee 
frustration  during  a  switch  to  IT’s  preferred  tool. 

Another  questionable  justification  for  standard¬ 
ization  has  been  that  integrating  products  from 
multiple  vendors  along  with  the  data  from  multiple 
systems  costs  more  than  standardizing  on  fewer 
vendors.  Unfortunately,  few  IT  departments  com¬ 
pare  the  potential  costs  of  integration  with  the  costs 
of  dependency  on  one  product.  With  fewer  vendors 
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in  the  IT  portfolio,  CIOs  limit  their  negotiating 
leverage;  vendors  won’t  budge  on  terms  if  they 
don’t  think  they  have  competition. 

Meanwhile,  standardization  produces 
unfortunate  side  effects.  Business  constituents 
wait  endlessly  for  that  elusive  next  version  or 
conversion.  Resentment  of  the  IT  department 
bubbles  and  boils  as  end  users’  favorite  tools  are  retired  or  new 
tools  lack  functionality  that  users  want. 

Why  Market  Consolidation  Hurts  CIOs 

IT  organizations  have  gotten  an  assist  in  their  quest  for  fewer 
vendors  from  the  software  industry.  For  example,  as  Oracle 
acquired  Siebel,  PeopleSoft  and  others,  the  acquired  products 
have  been  integrated  at  the  corporate  level,  and  license  and 
maintenance  fees  have  become  standardized. 

But  this  isn’t  exactly  a  standardization  fan’s  dream.  Custom¬ 
ers  have  to  worry  about  disconnects  between  the  acquiring  and 
acquired  vendor  teams,  pacing  of  upgrades,  prospective  higher 
license  and  maintenance  costs,  and  product  development  pri¬ 
orities.  As  my  former  Forrester  colleague  Vice  President  and 
Principal  Analyst  Andrew  Bartels  notes,  “Customers  need  to 

worry  that  the  acquired 
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vendor’s  product  might 
not  be  a  core  part  of  the 
acquiring  vendor’s  tech¬ 
nology  universe.” 

Even  when  an  acqui¬ 
sition  is  based  on  acquir¬ 
ing  the  new  technology  (rather  than  absorbing  the  competition), 
customers  should  be  concerned  about  the  potential  for  dimin¬ 
ishing  entrepreneurship  within  the  acquired  company. 

Five  Ways  to  Reverse  a  Flawed  Strategy 

Given  the  downsides  to  the  one-throat-to-choke  approach, 
should  IT  organizations  abandon  it?  In  some  cases,  such  as  in 
prime  contractor  service  vendor  relationships  (where  a  single 
consulting  firm  manages  relationships  with  smaller  subcon¬ 
tractors),  it  may  be  useful.  But  in  the  world  of  software,  having 
one  throat  to  choke  has  virtually  no  benefit.  Enterprises  need 
leverage  with  vendors  to  manage  costs  that  can  get  out  of  hand 
as  their  organizations  grow  and  the  software  market  shrinks. 
Here  are  five  ways  to  maintain  your  leverage. 

1.  Prioritize  a  common  data  model  over  common  soft¬ 
ware.  Sometimes  IT  migrates  to  a  single  software  vendor  but 
doesn’t  get  around  to  running  identical  application  versions,  or 
worse,  enables  users  to  enter  nonstandard  data.  Making  data 
usable  is  more  important  than  having  a  standard  version  or 
vendor.  Getting  agreement  on  the  data  model  is  more  difficult 
than  decreeing  a  software  standard,  but  the  business  results 
are  more  compelling  than  the  number  of  vendors  you  use. 


In  the  world  of  software,  enterprises 
need  leverage  with  vendors  to  manage 
and  maintain  costs  that  can  get  out  of 
hand  as  their  organizations  grow  and 
the  software  market  shrinks. 


2.  Retain  more  than  one  vendor  in  every  important 
category.  Maintaining  multiple  products  in  a  strategic  soft¬ 
ware  category  protects  your  leverage.  You  should  keep  ven¬ 
dors  guessing  by  reminding  thernof  their  competitors’  unique 
product  and  service  benefits. 

3.  Maintain  your  balance  of  power  with  competitive  or 
reference  bids.  Vendors  know  that  if  you  are  fully  dependent 
on  their  products,  you  will  have  difficulty  eliminating  them. 
One  mid-market  CIO  I  know  attends  the  user  conferences  held 
by  his  current  vendor’s  competition,  meets  with  the  competi¬ 
tor’s  salespeople,  solicits  bids  from  them,  and  considers  their 
products  for  new  deployments  and  at  upgrade  time. 

4.  Support  third-party  vendors.  The  struggles  of  ERP 
maintenance  provider  Tomorrow  Now  (which  competed  with, 
then  was  bought  by  and  is  now  being  sold  by  SAP)  raises  the 
question  of  why  more  CIOs  don’t  support  independent  mainte¬ 
nance  providers.  Are  CIOs  so  dependent  on  a  vendor’s  feature 
upgrades  in  subsequent  product  versions  that  they  give  in  to 
threats  to  withhold  them  if  maintenance  is  canceled? 

Think  about  whether  you  really  want  those  upgrades.  IT 
execs  can  band  together  to  find  the  capital  to  fund  third-party 
services  and  products  they  need  to  sustain  their  independence. 
There  could  be  more  tools  for  reverse  engineering  processes, 
data  and  reports  from  enterprise  apps,  which  in  turn  could 
enable  switching  vendors  if  service  declines  or  prices  rise. 

Instead,  CIOs  appear  to  be  maintaining  their  victim  status 
with  an  “Oh  well,  they’ve  got  us”  stance.  That’s  surprising  in 
light  of  their  inadvertent  and  growing  vendor  dependency  and 
the  inevitable  costs  and  risks  that  result. 

5.  Assess  your  portfolio  for  acquisition  probability.  Take 
a  look  at  your  portfolio  to  identify  your  greatest  vulnerabilities. 
Figure  out  which  software  products  are  likely  to  be  acquired- 
putting  product  innovation  at  risk— and  specify  contractually 
any  code  escrow  terms  that  preserve  your  options. 

The  end  result?  Those  business  constituents  will  be  happy 
to  hear  that  you  will  leave  them  alone  to  use  Cognos  or  Hyper¬ 
ion  or  whatever  application  they  want.  Now,  if  only  they  will 
agree  on  the  proposed  standard  definition  of  a  customer  name 
and  address.  BIS 


Laurie  M.  Orlov  does  research  and  consulting  on 
business  and  technology  strategy.  She  can  be 
reached  at  laurie.orlov@gmail.com.  To  comment 
on  this  article,  go  to  www.cio.com/171155. 
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expertise,  and  the  nation's  best  talent. 

TEKsystems®  is  proud  to  have  earned  a  reputation  for  offering 
unparalleled  technology  expertise.  In  fact,  as  a  leading 
technology  services  company,  our  commitment  to  creating 
and  upholding  the  highest  standards  is  only  exceeded  by 
our  passion  to  satisfy  customers  through  superior  service. 

Deploying  expertise  with  the  right  skills  and  methodology 
to  manage  complex  technology  implementations  is  our 
primary  goal.  We  constantly  challenge  ourselves  to  build 
upon  our  robust  portfolio  of  services,  and  deliver  top-tier  talent 
capable  of  implementing  virtually  any  form  of  technology. 

Visit  us  at  www.teksystems.com  for  more  information, 
or  call  888-835-7978  to  arrange  to  meet  with  an  account 
manager. 

people  you  can  trust,  results  you  can  count  on 

systems 
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Virtualization 


Users  are  working 
hard  to  figure  out 
how  far  they  can  push 

virtual  servers  without 

sacrificing  application 
service  levels,  according 
to  CIO's  first  survey 
on  virtualization 


Reader  ROI 

::  How  virtual  servers  and 
desktops  stack  up 

::  Deployment  challenges 


BY  LAURIANNE  MCLAUGHLIN 


You’re  knee-deep  in  virtualization,  and  you  love 
the  ROI  that  you’ve  seen  so  far.  But  you’re  also  grap¬ 
pling  with  tough  technical  and  political  challenges 
posed  by  today’s  hottest  technology  according  to 
C/O’ s  first  survey  on  virtualization. 

The  top  conundrums?  First,  figuring  out  just  how  far  you  can  push  your 
physical  servers  by  piling  on  more  and  more  virtual  machines  (VMs)— with¬ 
out  slowing  down  application  service  levels.  Next,  it’s  getting  experts  from 
across  IT  silos  to  plan  and  manage  the  virtualized  environment  together.  Fifty- 
eight  percent  of  you  say  technical  challenges  are  hardest,  though  the  other  42 
percent  of  you  say  the  organizational  issues  are  tougher  to  tackle. 

For  instance,  storage  and  networking  experts  may  strive  to  protect  their 
turf,  but  IT  leaders  need  server,  storage,  networking  and  security  experts 
working  together  to  plan  and  maintain  a  virtualized  environment. 

Complicating  the  situation,  virtualization  started  in  an  informal  way  in 
many  enterprises,  brought  in  by  a  few  VMs  at  a  time  by  the  development 
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Where  the  Virtual 
Machines  Are 

Servers  or  data  center 

85% 

Storage 

37% 

Desktops 

34% 

None  of  the  above 

8% 

Respondents  chose  all  that  apply 
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team  or  the  server  team.  “Our  server  vir¬ 
tualization  effort  was  really  a  bottom-up 
initiative,”  says  Michael  Abbene,  CIO  with 
Arch  Coal.  “It  was  already  being  pursued 
by  my  server  team  when  it  came  up  on  my 
radar  and  I  just  let  them  run  with  it.”  Now 
Abbene  uses  his  IT  control  board  to  keep 
virtualization  efforts  on  track  and  man¬ 
aged.  Having  a  cross-section  of  IT  pros  on 
that  team  helps  avoid  a  political  percep¬ 
tion  that  any  one  group  runs  the  show. 

While  many  enterprises  started  their 
virtualization  efforts  with  test  and  devel¬ 
opment  servers  in  the  data  center,  today’s 
pioneers  are  virtualizing  desktop  PCs, 
running  them  from  a  VM  on  a  server  in 
the  back  room  or  running  VMs  on  top 
of  a  guest  operating  system  on  the  local 
machine.  The  good  news:  The  payback  on 
virtualization  really  pops.  Server  virtu¬ 
alization,  in  particular,  provides  big  ben¬ 
efits;  so  far,  happiness  is  harder  to  come 
by  on  the  desktop,  although  most  of  you 
who  have  deployed  virtual  desktops  say 
you’re  satisfied  with  the  returns. 

Here’s  what  nearly  300  CIOs  who 
responded  to  the  survey  shared  about  their 
experiences  to  date  with  the  virtualization 
megatrend,  along  with  forward-looking 
advice  to  help  you  make  the  most  of  virtu¬ 
alization  efforts  in  the  year  ahead. 

Now,  Play  Nicely 

Technical  woes  rank  high— to  be  expected 
when  CIOs  deploy  a  new  technology 
such  as  virtualization.  However,  politi¬ 


cal  issues  loom  large:  42  percent  of  you 
reported  that  political  and  organizational 
challenges  were  harder  to  deal  with  than 
the  technology.  The  data  also  suggests 
that  you  may  not  be  paying  enough  atten¬ 
tion  to  how  you’re  staffing  your  virtual¬ 
ized  operations. 

Technology  performance  counts,  of 
course.  IT  risks  a  big  black  eye  if  you’ve  put 
too  many  VMs  on  one  physical  server  and 
key  business  apps  run  too  slowly.  CIOs 


vice  levels  stay  strong.  But  the  political 
problems  may  be  tougher  to  solve. 

“Nobody  likes  change,  even  when  there 
is  often  a  better  way  of  doing  things,”  says 
Stephen  Elliot,  a  research  director  with 
IDC  (a  sister  company  to  CIO’s  publisher). 
“It  takes  work  and  a  mind-set  to  reinvent 
IT  and  ourselves.” 

Remember,  virtualization  not  only 
asks  people  to  cede  some  control  over 
their  physical  server  kingdoms  but  also 


"Our  original  virtualization 
project  was,  in  a  sense,  job 

enrichment  lor  those  that 
were  just  running  the 
physical  servers 

-ARCH  COAL  CIO  MICHAEL  ABBENE 


understand  this  danger  full  well:  Nearly 
two-thirds  of  you  call  balancing  server 
workloads  or  maintaining  application  ser¬ 
vice  levels  one  of  your  three  biggest  chal¬ 
lenges  to  success,  followed  by  organization 
politics  and  measuring  ROI. 

Almost  half  of  you  are  shelling  out  for 
new  tools  to  ensure  that  application  ser- 


asks  IT  experts  from  different  realms 
to  work  more  closely  together.  “Virtual¬ 
ization  success  depends  on  tight  coop¬ 
eration  between  server,  storage,  network 
and  security  teams,”  says  Burton  Group 
Senior  Analyst  Chris  Wolf.  “Getting  divi¬ 
sions  that  operate  as  independent  silos  to 
work  together  presents  a  very  difficult 


Top  5  Challenges  to  Virtualization  Success 


64% 

Balancing  server  workloads  and  maintaining  application  service  levels 

MESHm  37°/q 

IT  organization  politics 

mmm  30% 

Measuring  ROI 

wm.  24% 

Governance 

■!  20% 

Pushback  from  business  leaders 


Respondents  chose  all  that  apply 
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Windows  Vista®  Business 


a  laptop  that  knows 


when  it's  . 
been  stolen 


just  what  you'd  expect 
from  the  laptop  experts. 


Secure  your  small  business  with  a  little  help  from  Toshiba. 

Getting  your  laptop  stolen  is  not  something  you  walk  around  thinking 
about,  until  it  happens  to  you.  That's  why  the  Tecra®  A9  comes  with  an 
optional  Computrace®  LoJackfor  Laptops®  security  system'  and  a  Biometric 
Fingerprint  Reader.  So  now  you  can  help  keep  those  impressive  trade 
secrets,  well,  secret.  And  since  it's  built  on  Intel®  Centrino®  with  vPro™ 
Technology  and  comes  with  a  genuine  Windows  Vista®  Business  operating 
system,  you  will  enjoy  even  more  enhanced  security  and  productivity.  See 
what  else  we  can  do  for  your  small  business  at  www.toshiba.com/lojack. 
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Leading  Innovation  » 
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change  without  notice.  For  more  information,  visit  Toshiba's  Web  site  at  www.pcsupport.toshiba.com.  ©2008  Toshiba  America  Information  Systems,  Inc.  All  rights  reserved. 
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challenge.”  Strong  executive  support,  says 
Wolf,  is  crucial. 

IT  leaders  who  embark  on  ambitious 
virtualization  projects  must  ask  their 
teams  to  work  in  new  ways.  “The  need 
to  have  the  various  system  administra¬ 
tor  groups  (storage,  server,  networking) 
[working  together]  exists  even  without 
virtualization,  so  this  was  not  a  new 
requirement  for  them,”  observes  Vincent 
Biddlecombe,  CTO  of  logistics  provider 
Transplace.  “[But]  they  did  need  to  rec¬ 
ognize  that  the  best  architecture  required 
them  to  leverage  the  capabilities  within 
those  three  areas.” 

Wolf  says  it’s  a  problem  that  so  few 
IT  groups  have  created  “center  of  excel¬ 
lence”  teams  that  bring  together  experts 
from  across  the  IT  silos.  Experience  helps. 
“Organizations  that  have  been  running 
virtualization  in  production  for  one  or 
more  years  understand  the  need  for  a 
center  of  excellence,”  says  Wolf. 

The  good  news  for  IT  organizations 
is  that  most  CIOs  want  in-house  virtual¬ 
ization  expertise.  Even  though  such  skills 


How  You’re  Beating 
the  Obstacles 

Doing  quick-win  projects 
to  prove  initial  success 

77% 

Investing  in  new  virtualization 
maintenance  tools  to  balance 
workload  and  maintain  applica¬ 
tion  service  levels 

43  % 

Creating  a  virtualization  “center 
of  excellence”  team  with  repre¬ 
sentatives  from  all  parts  of  IT 

20% 

Reorganizing  the  IT  department 

14% 

Respondents  chose  ail  that  apply 
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in  a  sense,  job  enrichment  for  those  that 
were  just  running  the  physical  servers,” 
Abbene  says.  Current  efforts  to  explore 
desktop  virtualization  (particularly 


In  addition  to  the  obvious  Gost-cutting 
benefits,  a  desire  for  better  disaster 
recovery  drives  63  percent  of  CIOs  to 
adopt  virtualized  servers. 


represent  a  precious  commodity,  most 
of  you  are  not  turning  to  consultants  as 
widely  as  you  did  during  the  last  wave  of 
technology  change— the  ERP  makeovers 
and  CRM  implementations.  In  fact,  73 
percent  of  CIOs  report  they  are  hiring  or 
developing  in-house  talent. 

How  to  do  it?  Arch  Coal’s  Abbene  says 
that  one  strategy  is  to  use  virtualization 
as  a  way  to  let  interested  IT  pros  expand 
their  technology  skill  set  and  resume. 
“Our  original  virtualization  project  was, 


More  on  Virtualization 


Find  out  about  VIRTUAL  SOFTWARE 
APPLICATIONS  and  why  you  might  want 
to  deploy  them  at  www.cio.com/article/ 
168354. 
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to  handle  provisioning  of  systems  for 
contractors)  and  storage  virtualization 
should  give  them  some  additional  enrich¬ 
ment  this  year,  he  says. 

But  it  can  be  hard  to  learn  as  you  go  with 
virtualization,  adds  Burton  Group’s  Wolf: 
A  consultant  can  help  you  avoid  blunders 
such  as  security  mistakes,  he  says. 

Desktop  Virtualization; 
Taking  It  Slowly 

There  are  almost  as  many  of  you  who  have 
virtualized  desktops  or  plan  to  have  them 
within  a  year  as  there  are  those  who  have 
no  intention  of  deploying  this  technol¬ 
ogy.  Why  is  desktop  virtualization  such 
a  polarizing  idea?  Desktop  virtualization 
proves  complex  to  optimize,  analysts  say, 
and  planning  for  it  requires  more  time. 


“These  technologies  are  not  a  one  size  fits 
all.  It  takes  time  to  figure  out  your  users’ 
needs  and  plan  the  implementation,”  says 
Forrester  Research  Senior  Analyst  Nata¬ 
lie  Lambert.  “I  don’t  think  CIOs  are  afraid 
of  user  backlash.  One  of  the  benefits  to 
hosted  desktop  virtualization  is  it  looks 
and  feels  just  like  a  desktop  computer. 
That’s  in  IT’s  favor.” 

It  still  takes  too  much  money  and  time 
to  manage  desktop  PCs,  so  it’s  no  surprise 
that  cutting  IT  administrative  and  support 
costs  tops  the  reasons  for  choosing  virtual 
desktops.  Long  term,  security  advantages 
will  also  prove  important,  analysts  say, 
even  though  they’re  not  top  of  mind  right 
now.  “Companies  that  build  their  business 
case  around  security  and  manageability 
are  most  advanced  in  their  adoption  of 
desktop  virtualization,”  says  Lambert. 

In  fact,  60  percent  of  you  are  pleased 
with  the  payback  on  virtual  desktops, 
though  a  notable  27  percent  are  just  not 
sure.  Perhaps  that’s  not  surprising,  as 
Lambert  notes,  given  that  desktop  vir- 


A  Hard  Sell 

Enthusiasm  for  virtual 
desktops  is  modest 


13% 


Will  deploy 
within  one  year 


Currently  using 
virtual  desktops 


37% 

No  plans  to 
use  virtualized 
desktops 


within  one  to 


5% 


Will  deploy  within 
three  to  five  years 
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Numbers  do  not  add  up  to  100%  due  to  rounding 
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Making  risk,  intelligent  decisions 
to  iManage  security 


Information  security,  privacy  &  data  protection  are  management  issues  with  global  business  implications.  The  associated 
risks  of  doing  business  today  need  to  be  clearly  understood  in  order  to  effectively  manage  your  business  and  protect 
your  organization. 


Managing  information  security  &  privacy  risk  at  the  enterprise  level  enables  companies  to  achieve  more  efficient  and 
effective  security  and  data  protection  processes  and  programs.  Issues  such  as  stakeholder  value,  consumer  confidence, 
brand  and  reputation  protection,  and  legal  and  regulatory  compliance  can  be  addressed.  The  Security  &  Privacy 
professionals  of  Deloitte  &  Touche  LLP  help  you  take  advantage  of  this  dynamic  situation  while  helping  to  manage  J 
security  risk.  With  the  largest  security  and  risk  practice  in  the  world,  we  can  help. 


As  an  industry  leader  offering  global  security  and  privacy  solutions,  we  are  focused  on 
delivering  excellent  client  service  through  a  network  of  offices  in  nearly  1 50  countries. 


Our  Security  &  Privacy  practice  offers  a  broad  array  of  services  and  solutions 
in  the  following  areas: 

•  Security  Management 

•  Privacy  &  Data  Protection 

•  Identity  and  Access  Management 

•  Application  Integrity 

•  Business  Continuity  Management 

•  Vulnerability  Management 

•  Infrastructure  &  Operations  Management 
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3  Reasons  to  Use 
Virtual  Desktops 

Reduce  administration 
and  support  costs 

62% 

Provision  systems  to  the 
end  users  more  quickly 

53% 

Simplify  maintenance 

45% 

Respondents  chose  up  to  three 
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tualization  is  more  complex  to  optimize 
than  server  or  storage  virtualization. 
Also,  analysts  say,  calculating  the  ROI  of 
virtual  desktops  accurately  depends  on 
having  good  figures  on  previrtualization 
PC  costs.  Meanwhile,  desktop  virtualiza¬ 


tion  is  also  the  newest  effort  of  the  three  at 
most  enterprises,  which  means  it  may  be 
too  early  to  measure  returns  accurately. 

Vendors  are  betting  you  won’t  dismiss 
desktop  virtualization  outright.  Citrix  bet  as 
much  when  it  made  a  $500  million  gamble 
in  2007  to  purchase  XenSource,  in  order 
to  marry  Citrix’s  experience  in  thin  clients 
and  Xen’s  experience  in  virtualization. 

Solid  Returns  for 
Virtual  Servers 

Few  ROI  calculations  please  85  percent 
of  CIOs.  The  ROI  on  server  virtualization 
does,  even  though  you’re  struggling  to 


measure  it  precisely.  Today,  virtualization 
helps  many  CIOs  reduce  costs  on  a  mas¬ 
sive  scale  while  improving  flexibility  to 
the  business.  That’s  been  the  experience 
of  Credit  Suisse  CIO  Tom  Sanzone,  whose 
efforts  we  profiled  earlier  this  year  (see 
“Taking  Virtual  Servers  to  the  Next  Level” 
at  www.cio.com/article/1229S0).  CIOs  in 
enterprises  large  and  small  tell  the  same 
story:  It  is  easy  to  wow  the  business  side 
with  the  returns. 

In  addition  to  the  obvious  cost-cut¬ 
ting  benefits,  a  desire  for  better  disaster 
recovery  plans  drives  63  percent  of  CIOs 
to  adopt  virtualized  servers.  IT  leaders 
such  as  Transplace’s  Biddlecombe  use 
VMs  to  copy  their  production  servers  to 
disaster  recovery  facilities.  As  for  flexibil¬ 
ity  and  speed,  Biddlecombe  can  provision 
a  new  server  in  30  minutes  instead  of  a 
week.  When  a  Transplace  business  execu¬ 
tive  needs  a  new  customer  demonstration 


environment,  IT  can  do  it  in  half  an  hour. 
“This  means  we  have  flexibility  to  add 
new  capacity  and  create  new  environ¬ 
ments  (such  as  for  testing  and  develop¬ 
ment)  to  support  projects  and  initiatives,” 
Biddlecombe  says.  (For  more  about  Bid- 
dlecombe’s  virtualization  efforts,  read 
“Virtualization  at  Warp  Speed,”  at  www 
.  cio.  com/article/1 64600.) 

Looking  ahead,  refining  your  approach 
to  virtualization  management  and  secu¬ 
rity  should  top  your  virtualization  to-do 
list.  One  important  job  going  forward 
will  be  for  CIOs  to  avoid  “VM  sprawl.” 
That’s  when  VMs  are  created  without 


enough  attention  to  hardware  resource 
or  security  considerations,  to  the  point 
where  it’s  hard  for  IT  to  know  how  many 
VMs  are  inside  the  company  and  how 
they’re  secured. 


The  Big  Payoff 

Satisfaction  is  high 
with  server  ROI 
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(For  more  advice  on  emerging  secu¬ 
rity  issues,  see  “How  to  Find  and  Fix  10 
Real  Threats  on  Your  Virtual  Servers,”  at 
www.  cio.  com/article/154950. ) 

As  you  learn  to  better  manage  and 
secure  VMs,  the  more  you  can  take 
advantage  of  lessons  that  you’ve  learned 
from  the  physical  world,  CIOs  say.  For 
instance,  some  CIOs  like  Abbene  and 
Biddlecombe  have  already  taken  the 
step  of  applying  their  “server  hardening” 
document— prescribing  steps  to  secure 
any  new  physical  server— to  any  new  VM 
that’s  created.  QQ 


Contact  Technology  Editor  Laurianne 
McLaughlin  at  lmclaughlin@cio.com.  To  com¬ 
ment  on  this  story,  go  to  www.cio.com/article/ 
168401. 


"The  need  to  have  storage, 
server  and  networking 
groups  [working  together] 

was  not  a  new  requirement, 
but  the  best  architecture 
required  them  to  leverage 
the  capabilities  within 
those  areas." 

-TRANSPLACE  CTO  VINCENT  BIDDLECOMBE 
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What's  Threatening 

Your  Network? 

:10s  expect  software  vendors  to  keep  pace  with  technology  and  deliver 
end-to-end  reliability  that  protects  their  businesses  from  evolving  security 
threats.  Security  software  vendors  find  the  challenge  of  meeting  CIO  needs 
compounded  by  the  increasing  complexity  of  software  and  the  computing 
ecosystem,  and  of  course,  the  ever-changing  security  threat  landscape. 

Beginning  with  the  introduction  of  the  Trustworthy  Computing  Initiative 
(TwC)  in  2002,  Microsoft  has  taken  a  series  of  steps  to  educate  customers 
and  address  security  issues  in  its  own  software  and  across  the  industry. 

TwC  tackles  this  challenge  by  taking  a  Defense-in-Depth  strategy  to  security, 
protecting  customer's  privacy  while  collecting  data  to  improve  future 
technology,  and  deepening  the  trust  between  Microsoft  and  its  customers 
and  partners.  As  part  of  TwC,  Microsoft  has  implemented  the  Security 
Development  Lifecycle  (SDL),  a  process  that  encompasses  a  series  of 
security-focused  activities  and  deliverables  for  each  phase  of  software 
development  in  order  to  create  software  that  can  withstand  a  malicious  attack. 

Microsoft  is  focused  on  building  technologies  that  provide  a  layered 
defense  against  spam,  spyware,  phishing  and  other  malicious  activity. 

By  making  important  strides  in  providing  easy-to-use  services  and  tools, 
Microsoft  helps  customers  configure  their  systems  correctly  and  keep  them 
up-to-date.  Prescriptive  guidance,  tailored  by  industry  and  organization  size, 
further  helps  customers  make  educated  choices  about  security  products  and 
procedures.  Microsoft  also  collaborates  with  industry  and  government  leaders 
to  combat  privacy  threats  and  promote  best  practices  around  the  world. 

As  part  of  this  comprehensive  Security  strategy,  Microsoft  publishes  the 
bi-yearly  Microsoft  Security  Intelligence  Report  (SIR)  to  educate  businesses 
and  governments  about  the  most  prevalent  threats  and  improvements  in 
technologies  to  detect  and  ward  off  real-world  dangers. 

Microsoft  Security  Intelligence  Report 

The  Microsoft  Security  Intelligence  Report  seeks  to  improve  industry-wide 
security  practices  and  protect  customers  by  identifying  trends  in  software 
vulnerabilities  and  exploits,  malware  and  potentially  unwanted  software.  The 
latest  report,  available  at  www.microsoft.com/sir,  is  based  on  data  collected 
in  the  first  half  of  2007  from  Microsoft  safety  scanner  and  malicious  software 
removal  tools,  Microsoft  Forefront  security  products,  global  Microsoft 
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Microsoft  recommends  three 
key  steps  to  help  protect  your 
organization: 

1.  Watch  a  5  Minute  Video  on  Industry  Trends. 

Microsoft  Security  Executives  created  a  high  level  video 
brief  about  the  threats  and  strategies  CIOs  need  to  know 
about  in  order  to  protect  their  organizations.  Watch  it  at 
the  Microsoft  Security  Center  at  www.microsoft.com/sir. 

2.  Get  a  Free  Security  Assessment.  An  assessment 
such  as  the  Microsoft  Security  Assessment  Tool  (MSAT) 
will  provide  a  baseline  from  which  you  can  build  a  3-5 
year  plan  for  securing  your  business.  Work  with  a  Part¬ 
ner  to  implement  a  layered  Defense-in-Depth  security 
program,  which  includes  both  software  upgrades  and 
user  education,  for  the  most  reliable  and  cost  effective 
way  to  secure  your  organization. 

3.  Get  Your  Team  Involved.  The  Microsoft  Security 
Center  at  http://www.microsoft.com/security,  provides 
updated  links  to  Security  training,  white  papers  and  pre¬ 
scriptive  guidance  from  top  security  industry  researchers 
to  help  your  IT  team  develop  strategies  and  mitigations 
against  current  security  threats. 


Research  teams  and  customer  feedback,  and  builds  upon 
data  published  in  previous  volumes  of  the  SIR.  According 
to  the  report,  the  first  half  of  2007  showed  more  than 
3,400  new  software  vulnerabilities,  which  represents  the 
first  period  to  period  decrease  since  2003.  However,  the 
number  of  High  Severity  vulnerabilities  detected  has  grown. 
This  development  suggests  there  is  a  wide  set  of  easy-to- 
exploit  targets  for  malicious  attackers. 

Perhaps  one  of  the  most  important  findings  of  the  report 
is  that  applications  have  become  a  high  level  security  risk, 
while  fewer  vulnerabilities  have  been  found  in  operating 
systems.  To  protect  against  this  trend,  the  SIR  advises 
both  security  vendors  and  IT  professionals  to  adjust  their 
risk  management  processes  to  ensure  business-critical 
applications  are  protected. 

E-Mail,  Instant  Messaging  and  even  blogs  also  pose 
some  of  the  biggest  security  threats  to  businesses.  While 
the  danger  of  classic  email  worms  has  decreased,  social 
engineering  attacks  that  trick  users  into  sharing  personal 
information  and  passwords  have  emerged  as  a  significant 
threat.  Those  crafting  the  attacks  appear  to  be  doing  so  for 
financial  gain,  which  has  increased  the  number  of  attackers 
and  the  severity  of  damage  they  inflict.  One  such  social 
engineering  danger  highlighted  in  the  SIR  is  the  Storm  worm, 
which  uses  a  familiar  link  to  a  greeting  card  or  top  news 
story  to  entice  users  to  open  an  attachment.  The  Storm 
worm  then  downloads  potentially  unwanted  software  onto 
the  user’s  machine  which  can  relay  spam  or  log  keystrokes. 

In  addition  to  the  latest  statistics  on  security 


threats  such  as  these,  the  SIR  also  provides 
information  about  the  strategies,  mitigations 
and  countermeasures  for  businesses  to  protect 
themselves. 

Protecting  Customers 

Each  month,  the  antimalware  products, 
services  and  tools  supported  by  the  Microsoft 
Malware  Protection  Center  (MMPC)  scan 
hundreds  of  millions  of  systems  on  the  Internet 
and  clean  millions  of  infections.  Over  50  million 
pieces  of  potentially  unwanted  software  were 
detected  and  removed  in  the  first  half  of  2007 
alone.  The  Malicious  Software  Removal  Tool 
(MSRT),  a  free  downloadable  tool,  was  executed 
1.9  billion  times  in  the  first  half  of  2007,  cleaning 
on  average  1  out  of  every  217  computers  it  was 
executed  on. 

One  way  to  reduce  potentially  unwanted 
software,  malware  and  vulnerabilities  is  to  conduct 
software  upgrades.  For  example,  the  SIR  found 
that  computers  running  Windows  Vista™  had  60% 
less  malware  than  those  running  Windows  XP 
SP  2.  (See  the  graph  “Prevalence  of  Malware  by 
Microsoft  Operating  System”) 

SIR  data  also  pointed  to  the  adoption  of 
service  packs  in  reducing  security  threats.  The 
Malicious  Software  Removal  Tool  detected  and 
cleaned  95.1%  less  malware  from  Windows  Vista 
machines  than  from  Windows  XP  machines 
without  any  Service  Packs.  Organizations  can 
further  protect  themselves  against  vulnerabilities 
with  regular  product  updates.  Microsoft  Windows 
Server  Update  Services  (part  of  Microsoft 
Windows  Server  2003)  enables  information 
technology  administrators  to  deploy  the  latest 
Microsoft  product  updates  to  computers  running 
Windows  operating  systems. 

Stringent  product  development  practices 
and  policies,  such  as  the  Security  Development 
Lifecycle,  enable  Microsoft  to  develop  longer  term 
security  strategies  that  mitigate  the  potential 
for  future  attacks.  Newer  products,  such  as 
Microsoft  Forefront  Security  for  Exchange  Server 
and  Microsoft  Exchange  Hosted  Services  (EHS), 
provide  e-mail  filtering  systems  and  e-mail 
authentication  systems  that  enable  organizations 
of  any  size  to  reap  large  benefits  by  reducing  the 
number  of  e-mail-based  attacks  that  make  it  to 
their  inboxes. 

Get  Secure,  Stay  Secure 

In  the  days  of  tighter  budgets  and  reduced 
staff,  security  concerns  are  often  overlooked  by 
overworked  and  underfunded  IT  organizations.  As 
the  threat  landscape  changes,  so  must  the  people, 
processes  and  technology  that  businesses  rely  on 
to  keep  their  assets  protected. 


For  more  information  about  securing  your 
network,  go  to:  www.microsoft.com/security 


Will  They  Follow? 

Pathways.  Turning  today’s  IT  professionals  into  tomorrow’s  business  leaders. 

You’ve  set  the  pace.  But  is  your  team  prepared  to  keep  up  with  the  momentous  chal  lenges  they  wi  1 1  face 
asourfutureCIOsand  business  leaders? 

Designed  by  CIOs,  Pathways  is  a  comprehensive  program  for  succession  planning  and  staff  development. 
Pathways  begins  with  a  robust  executive  competencies  assessment  to  identify  individual  strengths  and 
opportunities  for  growth.  Driven  by  these  results,  members  pursue  three  distinct  areas  of  development: 

•  Business:  Veteran  CIOs  mentor  intimate  groups  of  participants  on  the  corporate  politics 
and  pressures  of  the  executive  level . 

•  Leadership:  Twice-monthly  web  seminars  address  specific  executive  core  competencies. 

•  Technology:  Online  global  communities  provide  peer-to-peer  management  insights  in 
key  technology  functions. 

Help  tomorrow’s  leaders  gain  more  of  the  insight  and  knowledge  they  need  to  build  toward  the  next  big 
step  in  their  careers.  Visit  www.cioexecutivecouncil.com/pw01  to  learn  more  about  Pathways  and 
to  enroll  your  team  today. 


Pathways  enrollment  includes  complimentary  attendance  at  the  CIO  Leadership  Event  (a  $1,495  value) 

May  18-20,  Boston,  MA,  2008 


Pathways 

Advancing  Business,  Technology  &  Leadership  Excellence 


Powered  by 

FKSTB1  CIO  Executive  Council 

L-Wp  Leaders  Shaping  the  Future  of  Business 


The  Pathways  program  is  offered  by  the  CIO  Executive  Council,  a  member-led  executive  organization,  consisting  of  current 
and  future  business  leaders  working  to  impact  the  intersection  of  business,  technology  and  strategy.  The  CIO  Executive  Council's 
mission  is  to  foster  measurable  value  for  all  members  by  enabling  them— through  peer  reliance  and  outreach— to  apply  the 
knowledge,  insights  and  best  practices  of  their  peers  to  the  success  of  their  enterprise  and  personal  achievement.  To  learn  more 
about  the  CIO  Executive  Council,  visit  www.cioexecutivecouncil.com. 


You  have  no  time. 

Here  are  20  processes 
you  can  improve, 
benefits  you  can  reap 


can  make  in  just 

20  minutes. 


BY  STEPHANIE  OVERBY 
WITH  THE  STAFF  OF  CIO 
AND  CIO.COM 


COVER  STORY 


Leadership 


YOU  LOOK  AT  YOUR  TO-DO  LIST  and  everything  seems  hard  and 
insanely  long-term. 

Create  a  five-year  strategic  plan. 

Map  out  the  skills  your  IT  organization  will  need  over  the  next  36  months. 

Sign  that  seven-year  outsourcing  deal. 

It’s  okay.  You  can  admit  it.  Sometimes  it  can  get  a  little...overwhelming. 

Then  there’s  your  schedule.  Project  updates.  Executive  team  meetings. 
Vendor  visits.  Tete-a-tetes  with  direct  reports.  E-mail.  Presentations.  There’s 
just  no  time  to  breathe.  The  thought  that  you  could  possibly  fit  in  anything 
else  seems  downright  laughable. 

What  you  need  is  a  20-minute  miracle. 

Of  course,  most  big  transformations  take  a  while,  but  not  all  changes 
require  a  military  campaign.  There  are  things  you  can  do  in  just  one-third  of 
an  hour  that  can  have  a  meaningful  and,  yes,  even  a  long-term,  positive  effect 
on  your  life,  your  job  and  your  enterprise.  You  could  call  a  customer;  you 
could  downsize  (and  revolutionize)  your  weekly  meetings;  you  could  try  out 
some  Google  Apps.  We’ve  gathered  20  of  the  best  ideas  we  could  find:  quick 
yet  effective  tactics  that  can  improve  the  IT  organization,  boost  your  career, 
add  to  your  technology  knowledge,  sharpen  your  management  skills  and 
enhance  your  relationship  with  the  business. 

Now  all  you  have  to  do  is  free  up  that  first  20  minutes  to  read  this  article. 

Let  us  know  how  these  work  out  for  you.  And  tell  us  about  your  own  ideas 
for  how  to  accomplish  change  in  20-minute  doses. 

This  could  be  the  start  of  something.. .short. 


www.cio.com  |  MARCH  1,  2008  35 


COVER  STORY 


Leadership 


1  Counterintelligence  101  2  The  Mini-Meeting 


GRAB  THE  ANNUAL  10-K  REPORTS  that  yOUf  top 
competitors  have  filed  with  the  Securities  and 
Exchange  Commission  and  read  the  section 
called  “Management’s  Discussion  and  Analy¬ 
sis."  That’s  where  the  CEO 
(through  corporate  lawyers) 
describes  what  happened 
to  the  company  in  the  past 
year,  good  and  bad. 

By  scanning  that  mate¬ 
rial,  you  can  immediately 
get  a  better  understanding 
of  the  competition,  says  Mary  Lacity,  professor 
of  information  systems  at  the  University  of 
Missouri-St.  Louis. 

“CIOs  need  to  enable  business  strategies  and 
the  CIOs'  bosses  will  certainly  be  developing 
strategies  vis-a-vis  their  competitors,"  Lacity 
notes. 

To  buttress  what  should  be  an  ongoing 
campaign  to  elevate  your  IT  work  in  the  eyes  of 
your  fellow  execs,  check  out  how  your  top  com¬ 
petitors  position  IT.  UPS’s  latest  10-K  mentions 
technology  32  times.  Target,  Kohl’s,  Citigroup 
and  Blockbuster  are  also  known  for  tech  talk  in 
these  annual  reports. 

Also,  says  Lacity,  note  whether  rivals’  tech¬ 
nology  leaders  are  part  of  the  senior  executive 
team.  “If  most  competitors  have  their  CIO 
reporting  to  the  CEO,”  she  says,  “that  might  be 
ammunition  for  a  more  prominent  role  for  you.” 

-KIMS.  NASH 


IF  SINGLES  have  figured  out  a  way 
to  condense  that  painful  first  date  into 
eight  minutes  of  intense  communication, 
why  not  try  the  same  thing  with  your  IT 
meetings? 

Sit  down  right  now  and  reschedule 
all  your  internal  IT  meetings  for  just  20 
minutes.  If  that’s  too  radical,  do  it  for  the 
get-togethers  happening  this  week.  Or,  if 
you’re  feeling  especially  powerful,  try  it 
for  your  interdepartmental  meetings. 

“There’s  only  about  15  minutes  to 
30  minutes  of  true  productivity  in  most 
meetings,  even  though  meetings  are 
typically  set  up  for  an  hour,”  says  Michael 
Hites,  CIO  of  New  Mexico  State  Univer¬ 
sity,  who  once  placed  a  30-minute  limit 
on  all  meetings.  “The  idea  is  that  it  forces 
you  and  your  meeting  buddies  to  prepare 
and  focus.”  Hites  found  that  shorter 
meetings  were  more  effective  and  left 
more  time  to  actually  accomplish  things. 

If  you  like  that  idea, 
consider  this  even  more 
sweeping  suggestion 
from  Direct  Energy  CIO 
Kumud  Kalia:  Cancel  all 
recurring  meetings  with 
your  subordinate  staff. 
“Ask  them  to  come  to  you  with  major 
issues,  not  every  little  decision,”  Kalia 
advises.  -Stephanie  overby 


4  Your  Vendor,  Revealed 

ASK  YOUR  MOST  IMPORTANT  tech  vendors  to  conduct  an  assessment  of  their  relation¬ 
ship  with  your  organization.  “This  requires  minimal  effort  on  the  part  of  the  CIO,”  says 
Chris  Pattacini,  vice  president  of  outsourcing  consultancy  Nautilus  Advi¬ 
sors,  “but  it  can  pay  big  dividends.” 

Of  course,  there’s  a  catch.  Vendors  might  not  be  as  honest  as  you’d  like  for 
fear  the  information  could  be  used  against  them  in  future  negotiations.  Put 
the  vendor  reps  at  ease  and  make  sure  to  invite  them  to  rate  not  only  their 
organization’s  efforts  but  yours  as  well.  “The  assessment  can  spark  a  great 
dialogue  about  innovation,  relationship  issues  and  other  below-the-radar 
opportunities  for  improvement,”  says  Pattacini. 

To  make  sure  the  vendor  representative  follows  through,  give  him  an  achievable  goal  and 
a  deadline.  Ask  him  to  share  his  top  three  ideas  for  improving  the  relationship  at  the  next 
client-vendor  meeting,  says  Eugene  Kublanov,  CEO  of  globalization  advisory  firm  NeoIT. 

-s.o. 


3  Business 
Intelligence  201 

TAKE  YOUR  OWN  compa¬ 
ny’s  10-K  and  pay  attention 
to  the  bad  stuff  that  hap¬ 
pened  in  the  past  year.  Think 
about  how  technology  affects 
such  events,  then  figure  out 
what  you  can  do  about  them. 

For  example,  in  its  latest 
10-K,  Owens  Corning,  the 
$6.5  billion  maker  of  con¬ 
struction  materials,  talks 
about  how  the  decline  in  U.S. 
home  building  hurt  sales. 
Could  better  business  intel¬ 
ligence  have  predicted  how 
steeply  new  construction 
would  fall  and  have  helped 
Owens  prepare? 

Think  also  about  how  IT 
can  mitigate  the  scary  pos¬ 
sibilities  cited  in  the  “risk 
factors”  section.  Blockbuster 
notes  in  its  latest  10-K  that 
consolidation  in  the  movie 
rental  industry  looms  and 
that  some  video  stores  will 
be  forced  to  close.  “If  we  are 
unable  to  capitalize  on  the 
store  closings  of  our  com¬ 
petitors,”  the  $5.5  billion 
company’s  report  says,  “we 
may  be  unable  to  grow  our 
market  share  and  our  finan¬ 
cial  results  may  be  adversely 
affected.”  You  can  bet  Block¬ 
buster’s  new  CIO,  Keith  Mor¬ 
row,  is  thinking  about  how 
he  can  help  the  company 
profit  from  competitor  losses. 

This  20-minute  exercise 
educates  you  about  the  cen¬ 
tral  business  issues  that  your 
company  faces  and  fights, 
and  what  matters  to  Wall 
Street.  Remember  that  what 
Wall  Street  thinks  about 
your  company  affects  your 
future  and  your  paycheck. 

-K.S.N. 
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5  Self-Knowledge  Is  Power 


TWENTY  MINUTES  is  a  perfect  amount  of  time  for  some  good,  honest  introspection. 

Gene  Bedell,  author  of  Three  Steps  to  Yes:  The  Gentle  Art  of  Getting  Your  Way  and  the 
upcoming  The  Millionaire  in  the  Mirror,  promotes  the  merits  of  structured  introspection. 
“Sustained  changes  in  behavior  can  lead  to  important  improve¬ 
ments  in  things  like  career,  company,  work-life 
balance,”  says  Bedell,  a  former  IT  leader 
at  First  Boston,  among  other  compa¬ 
nies.  “A  period  of  serious  self-analysis 
is  a  good  place  to  start.” 

Find  a  quiet  room  where  you 
won’t  be  disturbed.  Ask  yourself 
if  you’re  working  toward  some¬ 
thing  or  just  working.  Do  you 
want  to  be  CIO  of  a  Fortune  500 
company?  Do  you  want  to  start  a 
business?  Zone  in  on  your  passion, 
says  Bedell.  “It  doesn’t  matter 
what  you  have  your  sights  set  on, 
but  they  must  be  set  on  something,”  he 
says.  “If  you  don’t  know  where  you  want  to  go,  it’s 
unlikely  you’ll  succeed  long-term.”  This  step  should  take  five  minutes. 

If  your  goal  is  vague— grow,  get  promoted,  make  more  money— spend  the  next  five  min¬ 
utes  seeking  specificity.  Throw  out  modesty  and  uncertainty.  Someone’s  got  to  come  up  with 
the  next  Google  or  become  the  new  CIO  of  GE.  Why  not  you? 

The  last  10  minutes  will  be  the  “10  minutes  of  truth,”  says  Bedell.  Ask  yourself  what 
you’re  going  to  do  when  you  leave  this  quiet  spot  in  minute  21.  Will  whatever  it  is  help  you 
achieve  the  goal  you  just  set?  Or  will  you  be  just  getting  a  job  done,  earning  a  paycheck?  If  it’s 
the  latter,  you’ve  still  learned  something  important:  You  need  to  change.  -s  o 


6  Call  a  Customer  (Bonus  Points  If  They’re  Irate) 


THAT’S  RIGHT— volunteer  to  contact  a 
real,  live  customer. 

“Much  of  what  IT  is  involved  in 
directly  impacts  the  business  product 
and  service  and  the  end  consumer/ 


customer,”  says  Jack  J. 

Santos,  CIO  Executive 

Strategist  at  the  Burton 

*  ~  djl 
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Group. 
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Reach  out  to  your 

k  ^ 

closest  contact  in  sales, 

marketing  or  customer 

Santos 

service.  Ask  for  a  customer  you  can  con¬ 
tact  who’s  been  outspoken  in  the  past. 

It  wouldn’t  hurt  to  pick  a  high-value 
or  highly  visible  customer.  “A  positive 
exchange  could  create  great  buzz  after¬ 
ward  which  reaches  other  parts  of  the 


company,”  says  Santos.  Want  to  really 
wow  people?  Ask  for  an  unsatisfied  cus¬ 
tomer  whose  experience  IT  might  have 
the  power  to  turn  around. 

The  definition  of  customer  will 
depend  on  your  business.  A  hospital 
CIO  might  talk  to  a  physician  who’s 
dealing  with  electronic  records  manage¬ 
ment  or,  if  the  organization  is  techno¬ 
logically  sophisticated,  a  patient.  Try  a 
doc  who  doesn’t  normally  interact  with 
IT  or  a  patient  who  has. 

This  dialogue  keeps  you  in  touch 
with  the  real  customer  experience,  says 
Santos,  and  it  sends  a  message  to  the 
customer  that  the  company  cares.  “It’s 
perceived  [by  the  customer]  as  astound¬ 
ing  follow-up  customer  service.”  -s.o. 


7  Life  Without  E-Mail 

when  it  comes  to  personal  com¬ 
munication  strategies,  IT  workers 
usually  follow  their  CIO’s  lead.  So  if 
the  CIO  is  always  forwarding  e-mails, 
adding  to  the  cc  line,  piling  attach¬ 
ments  on  top  of  attachments,  IT 
staffers  are  sure  to  follow.  Or,  if  the 
CIO  displays  greater  comfort  mes¬ 
saging  with  her  BlackBerry  than  in 
interacting  with  peers,  staffers  will 
model  that  behavior. 

To  encourage  more  face-to- 
face  interactions  with  internal  and 
external  customers,  and  to  fight 
e-mail  overload,  CIOs  should  spend 
20  minutes  explaining  to  their  col¬ 
leagues  and  IT  staffers  why  e-mail- 
free  Fridays  (or  any  other  day  of  the 
week)  is  a  good  idea.  And  here’s 
why:  Companies  that  swear  by 
“say  no  to  e-mail”  days  (or  even 
half  days)  find  that  it  leads  to  more 
proactive  decision  making,  better 
relations  among  coworkers  and 
increased  awareness  of  customer 
needs.  Instead  of  an  e-mail,  staffers 
will  pick  up  a  phone  or  even  drop  by 
a  customer  or  colleague  in  person. 

Intel  discovered  that  its  employ¬ 
ees  were  wasting  six  hours  a  week 
on  e-mail.  So  a  team  has  been 
piloting  a  range  of  initiatives,  one 
of  which  is  “Zero  e-mail  Friday.” 
According  to  one  of  the  team  lead¬ 
ers,  Nathan  Zeldes,  the  goal  is  to 
attack  a  "cube  culture”  in  which 
engineers,  sometimes  seated  just 
a  few  feet  from  each  other,  rely  on 
e-mail  to  exchange  ideas.  (The  pilot 
finished  in  February  and  the  team 
is  spending  March  collecting  data, 
interviewing  users  and  drawing  con¬ 
clusions.)  Other  companies,  such  as 
Deloitte  &  Touche  and  U.S.  Cellular, 
report  success  switching  off  e-mail 
for  periods  such  as  weekends. 

"All  it  takes,”  says  Zeldes,  “is  one 
manager  to  decide  to  do  something 
about  it.”  What  are  you  waiting  for? 

-THOMAS  WAILGUM 


ROBERT  NEUBECKER/THE ISPOT.COM 


www.cio.com  |  MARCH  1,  2008  37 


COVER  STORY  |  Leadership 


8  SayYesto 

StaffTraining 

in  20  minutes,  you  can  autho¬ 
rize  a  budget  line  for  training 
or,  even  more  quickly  and  inex¬ 
pensively,  send  an  e-mail  to 
your  staff  to  encourage  them  to 
pick  up  on  something  new.  And 
tell  them  they  are  expected  to 
spend  one  day  a  month  learn¬ 
ing.  Make  it  an  official  day  on 
everyone’s  calendar. 

“A  lot  of  9  to  5-ers  out  there 
don’t  have  the  time  or  inter¬ 
est  to  expand  their  horizons,” 
says  Julie  Lerman,  a  Vermont- 
based  .Net  software  consultant 
who  is  active  in  the  computer 
user  group  community,  in  20 
minutes,  you  can  take  the  first 
step  to  help  those  employees 
find  out  what  they’re  missing 
and  add  critical  skills  to  your 
organization. 

One  no-cost  way  to  do  this 
is  to  encourage  participation 
in  computer  user  group  meet¬ 
ings  and  industry  associations. 
Lerman  gives  the  example  of 
some  developers  who  attended 
a  free,  full  day  MSDN  (Micro¬ 
soft  Developer  Network)  train¬ 
ing  class,  which  showed  off  the 
new  features  in  Visual  Studio 
2008.  "These  guys’  eyes 
opened  wide,”  says  Lerman. 

“So  now  their  interest  has  been 
piqued  and  it  will  be  important 
for  their  managers  to  keep 
them  looking  for  and  wanting 
new  information.” 

-ESTHER  SCHINDLER 


9  And  Who  Are  You? 

AN  IMPROMPTU  CHAT  with  someone  on 
your  staff  can  make  that  person  nervous  and 
can  seem  contrived  if  you’re  not  in  the  habit  of 
doing  it.  So  get  in  the  habit. 

“Why  are  you  wandering  around?”  asks 
Gerry  McCartney,  vice  president  of  IT  at  Pur¬ 
due  University.  “Because 
that’s  what  a  good  boss 
does.” 

Visits  with  employees  let 
you  gather  intelligence  about 
what’s  going  on  in  your  orga¬ 
nization— as  well  as  help  you 
build  relationships  that  make  it  more  cohesive. 
“If  you  believe  that  your  people  are  the  key  to 
your  success,  building  a  personal  connection 
is  an  important  piece  of  sustaining  their  com¬ 
mitment,”  says  Tom  Murphy,  senior  vice  presi¬ 
dent  and  CIO  with  AmerisourceBergen.  “It 
also  gives  you  a  view  of  organization  realities 
that  you  don’t  necessarily  get  when  dealing 
just  with  your  direct  reports.” 

Just  don’t  ask,  How’s  it  going?  “Be  spe¬ 


cific,”  advises  Murphy.  And 
whatever  you  say,  make  sure 
you  mean  it.  “People  know  if 
you’re  genuinely  interested  in 
their  opinions  and  observa¬ 
tions,”  Murphy  says. 

McCartney  lays  the  groundwork  for  con¬ 
versations  with  employees  by  spending  a  few 
minutes  getting  to  know  every  new  hire  within 
his  or  her  first  two  weeks  on  the  job.  “I  think 
those  folks  are  more  inclined  to  talk  to  me 
later  because  when  we  met  [there]  wasn’t  a 
business  agenda,”  he  says.  In  fact,  he  makes  it 
a  point  to  engage  employees  in  neutral  situa¬ 
tions,  such  as  at  an  office  luncheon. 

When  he  brings  up  work,  McCartney  asks 
his  staff  to  suggest  ways  to  make  their  jobs 
easier  and  to  make  themselves  more  effec¬ 
tive.  They  might  not  have  much  to  say  the  first 
time,  he  says.  But  if  they  get  the  idea  that  he’s 
approachable,  they’ll  feel  more  comfortable 
coming  to  him  when  they  do  have  something 
important  to  say.  -elanavaron 


McCartney 


Murphy 


10  Go  for  a  Walk 

YOU  KNOW  WALKING  is  good  for  you.  A  regular,  20-minute  jaunt  can  reduce  your  risk 
of  heart  attack,  keep  your  weight  down  and  help  you  manage  stress.  We’re  made  for  it,  too. 
As  James  A.  Levine,  a  physician  and  researcher  with  the  Mayo  Clinic,  writes  in  a  recent 
issue  of  the  Mayo  Clinic  Proceedings,  “Our  bodies  evolved  to  walk,”  but  in  the  modern 
world,  “we  have  forsaken  our  legs  as  a  means  of  locomotion,  work  and  leisure.” 

Health  experts  advise  walking  at  least  30  minutes  a  day,  but  “20  min¬ 
utes  is  better  than  nothing,”  says  Maggie  Miller,  senior  vice  president  and 
CIO  with  Warner  Music  Group. 

Miller  finds  that  a  short  run  or  a  vigorous  walk  first  thing  in  the  morn¬ 
ing  helps  her  think  more  clearly  and  creatively.  She’ll  also  hit  the  pave¬ 
ment  “when  I’m  mad  about  something.”  Her  strategy:  “Write  the  zinger 
e-mail  and 
park  it  in  my  drafts  box  to 
simmer  while  I  go  for  a  walk 
in  Central  Park  or,  more 
likely,  Riverside  Park,  which 
is  quieter.  By  the  time  I  get 
back  I’ll  usually  have  worked 
out  a  way  to  deal  with  what¬ 
ever  the  issue  is  in  a  much 
more  constructive  and  col¬ 
laborative  way.” 

Now,  get  out  of  that  chair. 

-E.V. 


Miller 
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11  Knock  on  a 

New  Door 

IN  ORDER  TO  CREATE  an  IT 

organization  that  provides 
strategic  value,  you  have  to 
understand  how  your  busi¬ 
ness  operates.  "It  always  starts 
there,"  says  Michael  Jones,  CIO 
of  the  National  Marrow  Donor 
Program.  “I  don’t  mean  how 
IT  operates  in  the  business 
context;  I  mean  how  the  busi¬ 
ness  functions.  What  drives 
profit  and  revenue.  What  the 
business  spends  money  on. 
Who  your  customers  are.  What 
requirements  each  person 
has.”  To  find  out,  says  Jones, 
“you  need  to  talk  to  a  lot  of 
people,  from  the  C  level  down 
to  the  basement.” 

Chances  are  you  already 
check  in  regularly  with  a 
defined  group  of  business 
executives.  Why  not  use  your 
20  minutes  to  venture  into 
uncharted  territory  and  visit 
someone  new? 

Don’t  go  in  with  an  agenda. 
Leave  the  strategic  plan 
behind.  And  for  goodness'  sake, 
don't  give  a  speech. 

Have  a  conversation. 

If  the  topic  turns  to  busi¬ 
ness,  ask  questions.  What’s  his 
or  her  job  like?  What’s  going 
well?  What’s  not?  What  might 
make  his  or  her  job  easier? 
Brian  Tennant,  CIO  of  Bethesda 
Lutheran  Homes  and  Services 
says  a  simple  Whatcha  workin’ 
on?  can  do  the  trick,  “1-ask 
people  what  they’re  doing  and  I 
gain  a  tremendous  perspective 
on  functions,  roles,  the  work 
people  do  and  the  challenges 
they  face,”  Tennant  says. 

If  your  new  friend  asks  about 
you,  keep  it  brief  but  keep  it 
real.  That's  what  friends  do. 

-s.o. 


12  Should  You 
Stay  or  Should 
You  Go  Now? 

GOOD  LEADERS,  like  good  cap¬ 
tains,  often  think  their  job  is  to  carry 
on  no  matter  what,  even  to  the  point 
of  going  down  with  a  sinking  ship. 

But  sometimes  the  best  thing  to  do 
is  to  find  a  lifeboat  and  paddle  to  an 
inviting  shore.  “If  you  find  the  job  no 
longer  excites  you,  it’s  time  to  seek 
another,”  says  Steve  Yates,  KeyBank  CIO.  “When  you  find  it  grinding  on  you,  you’re  done.” 

It  should  take  less  than  20  minutes  to  see  if  you’ve  passed  the  point  of  no  return.  Grab  a  pen 
and  a  pad  of  paper  (yes,  do  it  the  old-fashioned  way;  it’ll  help  ground  you)  and  set  a  timer  for  10 
or  15  minutes.  (Hourglasses  are  optional,  but  recommended.)  Draw  a  line  down  the  middle.  On 
one  side  write  the  reasons  you  should  stay;  on  the  other,  the  reasons  you  should  go.  If  your  go 
list  is  longer  than  your  stay  list,  it’s  time  to  go.  Finding  a  new  job  is  no  harder  than  showing  up  for 
a  bad  one,  day  in  and  day  out. 

“The  CIO  job  is  demanding,”  Yates  says.  “You  have  to  feel  good  about  coming  to  work  to  be 
able  to  handle  all  the  twists  and  turns  of  politics,  technology,  organization  change  and  more.” 

If  you’ve  burned  out,  your  people  will  notice  sooner  or  later,  and  it’ll  only  be  a  matter  of  time 
before  the  decision  of  whether  to  sail  for  new  shores  is  taken  out  of  your  hands. 

-AL SACCO 


13  What’s  So  Funny  About  Company  Peace, 

Love  and  Understanding? 

MANY  I.T.  STAFFERS  don’t  have  a  lot  of  interaction  with  other  departments.  By  invit¬ 
ing  the  head  of  finance  (or  marketing,  sales  or  HR)  to  give  an  informal  15-minute  pre¬ 
sentation  at  your  next  staff  meeting,  your  IT  department  can  become  familiar  with  the 
structure,  needs,  current  initiatives  and  challenges  of  other  groups  within  the  company. 

There  shouldn’t  really  be  heavy  lifting  on  either  side,  as  department  execs  tend  to 
have  canned  presentations  about  their  department  and  their  current  needs— presenta¬ 
tions  they  often  give  to  the  board  of  directors  or 
within  their  own  departments. 

The  benefit  to  participating  execs:  The  better  IT 
understands  their  world,  the  better  IT  will  be  at  ser¬ 
vicing  them,  says  Peter  Kretzman,  IT  executive  and 
author  of  CIO/CTO  Perspectives  Blog. 

“These  presentations  may  be  the  only  structured 
opportunity  that  a  lot  of  people  in  IT  have  been  given 
to  learn  and  ask  questions  about  other  company 
areas,”  says  Kretzman.  “Through  these  sessions, 
the  exec  in  charge  of  those  areas  becomes  more  than 
just  a  name  and  a  face,  and  real  understanding  and 
positive  working  relationships  tend  to  ensue.”  He 
adds  that  it’s  often  a  reciprocal  arrangement,  one  that 
offers  a  huge  opportunity  to  evangelize  what  IT  does 
and  why.  -shawna  McALEArney 

WWW. 
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14  Set  Up  a  Facebook  Account 

MAYBE  YOU  DON’T  LIKE  FACEBOOK.  Maybe  you 
think  it’s  for  kids. 


But  maybe  you’re  wrong  and  by  being  wrong  you  may  be  missing  out  on  an  opportu¬ 
nity  to  learn  a  little  something  about  social  networking.  After  all,  with  64  million  users, 
Facebook  is  the  fastest-growing  social  network  on  the  Web.  The  company  claims  that  its 
over-25  demographic  has  grown  the  most  rapidly.  So  take  20  minutes 
and  set  up  an  account. 

Mark  A.  Lappin,  director  of  IT  for  Lee  Michaels  Fine  Jewelry— which 
owns  eight  retail  shops  in  Louisiana,  Texas  and  Mississippi— has 
maintained  an  account  since  the  site  opened  in  2004.  “We  don’t  allow 
access  at  work,”  says  Lappin,  “but  [my]  people  use  it  on  their  own 
time  at  home  frequently.” 

Lappin  believes  CIOs  can  learn  from  Facebook  in  order  to  build  suc¬ 
cessful  social  network  equivalents  for  employees  behind  the  corporate  firewall.  “That,” 
he  says,  “is  a  goal  on  our  intranet  down  the  line.”  _c.g.  lynch 


Lappin 


15  Encrypt  Now  or  Regret  It  Later 


WHEN  AN  EMPLOYEE  or  contractor  loses  a  notebook  PC  and  it  turns  into  a  data 
breach  and  PR  nightmare,  what  are  you  going  to  say  when  your  CEO  asks  why  you 
hadn  t  encrypted  the  company  s  notebooks?  That  won’t  be  fun.  So  start  investigating 
encryption  options. 

“A  lost  PC  without  encryption  is  truly  getting  caught  with  your  pants  down,”  says 
Forrester  Research  senior  analyst  Natalie  Lambert.  “However,  you  would  be  sur¬ 
prised  at  the  number  of  businesses  that  have  not  encrypted  their  mobile  devices.” 

Price  used  to  be  a  concern,  but  encryption  technology  has  become  practically  a 
commodity  item,  Lambert  says.  For  advice  from  CIOs  who  have  encrypted  their 
mobile  fleets,  see  “How  to  Lock  Up  Laptop  Security”  (www.cio. com/article/147900). 

-LAURIANNE  MCLAUGHLIN 


16  What  Users  Want 


ARE  YOU  SURE  you’re 
making  the  right  IT 
investments?  Here’s  a 
novel  idea:  Why  not  ask? 

According  to  David 
Hatch,  research  director 
at  consultancy  Aberdeen 
Group,  IT  management 
spends  way  too  much 
time  researching  the 
latest  technologies  and 
virtually  no  time  asking 
users  what  they  want. 
There's  a  huge  discon¬ 
nect  between  strategic 
thinking  at  the  senior 
management  level  and 


real-world  usage  and 
adoption  among  end 
users,  he  says.  That’s 
why  Hatch  recommends 
taking  20  minutes  to  con¬ 
duct  an  informal,  anony¬ 
mous  e-mail  survey  of 
all  company  employees 
that  asks  the  following 
questions: 

►  Which  of  our  apps  are 
most  useful  to  you?  Why? 
(Be  sure  to  provide  a  list.) 

►  What  app  is  so  critical 
that  you  simply  couldn’t 
do  your  job  without  it? 

►  Which  app  don’t  you 


use  at  all? 

►  Which  app  causes  you 
the  most  problems? 

►  What  new  business 
application  or  capability, 
currently  not  provided, 
would  instantly  make 
your  job  easier  and 
improve  your  perfor¬ 
mance?  -DIANN  DANIEL 


17  The  Kids  Are 
Real  Smart 

SURE,  YOUR  SEASONED  VETS 
have  great  ideas  but  why  not  shake 
things  up  and  ask  the  kids  on  your 
staff  to  come  up  with  ideas  to  improve 
efficiency,  quality  or  the  workplace? 
Organizational  newbies  can  have  a 
unique  perspective,  says  NeoIT’s  CEO 
Eugene  Kublanov,  but  they’re  rarely 
tapped  effectively. 

C-level  executives  rarely  solicit  or 
hear  the  ideas  of  their  junior  team 
members,  says  Kublanov.  And  that’s 
a  waste  of  a  valuable  resource.  “Many 
technologies  that  started  in  the  con¬ 
sumer  or  peer-to-peer  world,  such  as 
mobile  technologies,  video  games  and 
wikis,  are  making  their  way  into  the 
business  realm,”  Kublanov  points  out. 
“Who  better  to  provide  input  on  how 
to  apply  these  technologies  to  make 
business  more  effective  than  those 
for  whom  using  these  tools  is  second 
nature?” 

Of  course,  you  don’t  want  to  look 
like  you’re  going  around  the  chain  of 
command  to  solicit  the  input,  so  keep 
it  casual,  says  Kublanov.  Try  some¬ 
thing  like,  “Hey,  I’d  like  to  get  your 
thoughts  on  how  we  might  improve 
efficiency  in  the  organization.  Think 
about  it  and  get  back  to  me  with  your 
top  three  ideas  by  next  Friday.” 

This  isn’t  pie-in-the-sky,  do-gooder, 
morale-boosting  theory.  Kublanov 
and  his  clients  have  put  it  into  practice 
successfully.  “Some  of  the  outcomes 
have  included  leveraging  wiki  tools  as 
a  more  effective  knowledge  manage¬ 
ment  system,  distributing  training 
videos  on  iPods  and  using  social 
networking  tools  to  create  internal 
knowledge  hubs,”  Kublanov  says. 

Reward  your  young  innovators  by 
involving  them  in  the  implementation 
of  their  ideas.  And  “it  never  hurts  to 
recognize  the  person  for  the  idea  in  a 
group  setting,”  says  Kublanov.  And 
a  simple  thanks  from  the  boss  goes  a 
long  way,  too.  -s.o. 
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18  Does 
Your  Vendor 
“Get"  You? 


sharing  your  strategic  plan 
with  your  vendors  can  help 
both  of  you.  Maybe  your  plan 
relies  on  products  that  are 
going  end  of  life.  Wouldn’t 
that  be  good  to  know?  Maybe 
there  are  products  in  the 
pipeline  that  can  better  meet 
your  future  needs.  How 
would  you  know  that? 

First,  invite  your  strategic 
vendors  to  an  IT  strategic 
plan  presentation  and  allow 
time  for  a  Q&A.  Stephen 
Guth,  executive  director  of 
the  Vendor  Management 
Office  at  the  National  Rural 
Electric  Cooperative  Associ¬ 
ation,  says  limiting  the  num¬ 
ber  of  representatives  from 
each  vendor  and  targeting 
the  key  players,  such  as  the 
account  executive,  his  or  her 
manager  and  an  executive 
representative,  is  important. 
And  the  strategic  plan  should 
not  be  e-mailed  or  handed 
out  to  vendors;  they  may  not 
read  it,  and  copies  are  dif¬ 
ficult  to  control. 

“Having  a  roomful  of  ven¬ 
dors  listen  to  an  IT  strategic 
plan  presentation,  even  when 
there  is  no  product  or  service 
overlap,”  says  Guth,  "creates 
a  sense  of  competition.” 

Ail  of  them  competing  to 
help  you.  How  can  you  beat 
that?  -s.  m. 


Manage  Your  Life 


Learn  to  thrive  24/7.  Read 

"THE  EXTREME  CIO:  TAKING 
THE  ‘LIFE’  OUT  OF  WORK-LIFE 
BALANCE”  at  www.cio.com/ 
article/132551. 

cio.com 


19  iPhone  Fun 

HUGH  SCOTT,  VP  of  IS  at  Direct  Energy,  has  a  team  that  supports  some  500  smartphones,  all 
BlackBerrys.  But  at  home,  he’s  an  iPhone  convert. 

Why?  Scott  believes  it  offers  lessons  for  IT  people  regardless  of  their  chosen  mobile  theology. 

“The  first  thing  is  the  sheer  usability  of  the  product,”  Scott  says.  “You  don’t  even  get  a  user 
manual  with  it.  You  can  just  figure  out  how  it  works.  That’s  quite  an  important  lesson  for  CIOs.” 

Scott  also  says  that  Apple  extended  that  usability  well  beyond  the  user  interface,  a  fact  that 
became  clear  when  he  activated  his  iPhone  for  the  first  time.  “I  had  all  my  personal  e-mail 
accounts  on  my  [Apple  notebook].  And  after  I  set  up  [the  iPhone],  all  of  my  e-mail  accounts  had 
all  been  set  up.  I  was  used  to  having  to  set  up  the  POP  [mail]  address  myself.  But  this  thing  fig¬ 
ured  it  out  on  its  own.”  And  users  will  come  to  expect  the  same  kind  of  ease  from  the  technology 
they  find  at  the  office. 

Even  with  its  advantages,  Scott  says  he  has  no  plans  to  migrate  employees  from  the  BlackBer- 
ry’s  secure,  enterprise-tested  RIM  platform.  But  while  he’s  not  yet  moving  his  corporate  budget 
to  the  iPhone,  his  home  budget  is  another  story. 

“This  Christmas  I  bought  my  wife  an  iPhone,”  Scott  says.  “We’re  a  two  iPhone  family  now.” 

-CHRISTOPHER  LINDQUIST 


20  Take  a  Google  Test  Drive 


OKAY,  SO  IT  MIGHT  BE 
another  decade  before  you 
use  a  productivity  suite 
other  than  Microsoft  Office. 
But  if  you’re  tired  of  pay¬ 
ing  the  licensing  fee  for 
workers  who  use  just  a  few 
Office  features,  it’s  worth 
taking  a  peek  at  the  con¬ 
sumer  version  of  Google 
Apps. 

By  default,  when  you 
start  a  Gmail  account,  you 
have  Google  Apps.  Try 
the  docs  &  spreadsheets, 
calendar  and  Gmail  chat 
functions  and  you  might 
find  the  lightweight  tools  to 
be  pretty  helpful.  Rebecca 
Wettemann,  an  analyst 


with  Nucleus  Research, 
says  CIOs  should  have 
a  Google  Apps  account 
if  only  to  show  their 
users  that  they  know 
what’s  going  on  in  the 
consumer  space.  “It  can 
be  a  great  way  to  gain 
credibility  with  a  user 
base  that  sometimes 
sees  IT  as  being  all  about 
servers  and  storage  and 
not  about  software  innova¬ 
tion,”  she  says.  For  only 
$50  per  user  per  year  for 
an  enterprise  version  of 
Google  Apps  with  Postini 
security  for  e-mail,  you 
might  find  it  a  compel¬ 
ling  option  for  “nonpower 


users”  of  productivity 
applications. 

“As  Google  Apps’  func¬ 
tionality  grows,  CIOs  may 
want  to  consider  migrating 
some  users  from  Microsoft 
Office  to  Google  Apps  and 
showing  the  CFO  a  nice 
return  on  investment,” 
Wettemann  says.  -c.g.l. 


To  comment  on  this  story  and  to  add  your  own  ideas,  go  to  www.cio.com/article/185900. 
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Outsourcing 


DealstoCome 

Consolidation.  A  rising  rupee.  Going  green. 

These  and  othertrends  are  reshapingthe 
outsourcing  landscape.  Here’s  whatto  lookfor. 

BY  STEPHANIE  OVERBY 

For  2008,  the  headline  in  the  IT  service  market  could 
be,  “The  more  things  change,  the  more  they  stay  the  same.” 

So  say  IT  outsourcing  experts  when  asked  what  they  see  for  this  marketplace 
in  the  year  ahead.  But  to  better  understand  the  future,  let’s  take  a  quick  look  back 
at  the  past.  Last  year  was  a  dynamic  one  for  the  outsourcing  industry.  The  Indian 
rupee  rose  to  record  levels  while  the  U.S.  dollar  declined  against  most  major  cur¬ 
rencies,  impacting  global  IT  service  providers  and  customers  alike.  Merger  and 
acquisition  activity  kicked  into  high  gear,  most  notable  for  the  inroads  Indian  pro¬ 
viders  made  into  the  U.S.  market.  And  buyers  of  IT  services  began  to  explore  loca¬ 
tions  from  Shanghai  to  Sao  Paulo  to  balance  their  offshore  outsourcing  portfolio. 

The  experts  expect  more  of  the  same  for  2008.  The  rupee  will  continue  its  rise,  they 
say,  keeping  global  IT  service  providers  and  customers  on  edge.  Industry  consolidation 
will  proceed  apace.  The  offshore  outsourcing  market  will  develop  in  India  and  beyond. 
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Reader  ROI 

::  How  a  strong 
rupee  impacts 
outsourcing 
plans 

::  Why  new 
offshore  des¬ 
tinations  are 
growing 


42  MARCH  1,  200 


ILLUSTRATION  BY  JIM  FRAZIER/CORBIS 


www.cio.com  I  MARCH  1,  2  0  08  43 


Outsourcing 


This  might  be  the  year  call  centers  shape  up* 

IT  service  providers  figure  out  a  way  to  provide  more  of 
the  innovation  their  clients  crave  *  and  customers  force  their 
providers  to  get  serious  about  going  green. 


t 


But  there  could  be  some  changes  in  store.  This  might  be  the 
year  call  centers  shape  up,  IT  service  providers  figure  out  a  way 
to  provide  more  of  the  innovation  their  clients  crave,  and  cus¬ 
tomers  force  their  providers  to  get  serious  about  going  green. 

The  trends  that  are  expected  to  shape  the  outsourcing 
landscape  in  the  coming  months  (the  forces  of  a  global  econ¬ 
omy,  vendor  expansion  and  consolidation,  new  standards 
for  IT  deals,  governance  and  performance)  will  present  new 
opportunities-— or  new  problems— for  CIOs  charged  with 
doing  more  with  less  in  an  economically  uncertain  environ¬ 
ment.  “There  is  a  lot  of  opportunity  out  there,  //you  know 
how  to  manage  it,”  says  Steve  Bandrowczak,  CIO  of  Nortel, 
an  $11.4  billion  global  telecommunications  provider.  “That’s 
where  I  see  people  getting  in  trouble.  You  have  to  have  the 
skills  necessary  to  manage  your  outsourcing  partners.” 

THE  ECONOMICS 
OF  OUTSOURCING 

The  Indian  rupee  rose  more  than  11  percent  in  value  against 
the  U.S.  dollar  in  2007.  And  while  it  took  a  brief  pause  in  Jan¬ 
uary,  experts  say  the  rupee  has  nowhere  to  go  but  up  in  the 
absence  of  government  intervention  this  year.  The  dollar’s 
continued  decline  could  be  difficult  for  some  service  provid¬ 
ers  to  absorb.  During  2007,  Infosys  reported  a  currency 
impact  of  2.8  percent  on  third-quarter  profitability,  Wipro 
contemplated  six-day  workweeks,  and  EDS  and  Mphasis 
considered  billing  clients  in  rupees.  Customers,  meanwhile, 
kept  a  sharp  watch  for  other  symptoms  of  currency  stress. 

If  the  currency  gap  continues  to  widen,  expect  Indian  out¬ 
sourcing  providers  (and  multinationals  with  a  big  presence 
on  the  subcontinent)  to  index  their  prices  to  local  salaries, 
promote  other  offshore  locations  like  China  and  Latin  Amer¬ 
ica,  delay  hiring  of  new  staff,  and  build  currency  hedges  into 
contracts,  says  offshore  outsourcing  consultancy  NeoIT. 

Oh,  and  Canada?  With  the  loonie  nearly  even  with  the 
greenback,  the  U.S.  neighbor  to  the  north’s  days  as  an  attrac¬ 
tive  nearshore  outsourcing  destination  are  numbered. 

Even  as  the  dollar  has  weakened  against  other  currencies, 
outsourcing  hot  spots  have  become  oversaturated.  So  many 
providers  and  customers  are  looking  to  set  up  shop  else¬ 
where.  Call  it  the  exodus  to  the  tier-two  cities  and  expect  to 
see  more  of  it  this  year. 

Look  at  India.  Its  overall  economy  is  growing  at  9  percent 
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a  year.  And  as  it  grows,  a  talent  shortage  is  emerging  in  the 
top  cities;  local  universities  are  no  longer  providing  enough 
qualified  candidates,  and  recent  grads  are  wary  of  starting 
at  the  bottom  because  they’ve  got  other  options,  according  to 
NeoIT.  That’s  spurring  some  providers  to  move  from  Banga¬ 
lore— the  birthplace  of  India’s  IT  services  boom— to  smaller, 
less  saturated  cities  such  as  Kochi  or  Ahmedabad. 

India  is  not  alone.  Monterrey,  Mexico,  for  example,  is  pro¬ 
jecting  a  shortfall  of  software  engineers  in  2008.  The  same 
story  is  occurring  in  dozens  of  outsourcing  hot  spots  around 
the  world. 

As  a  result,  some  IT  service  providers  are  jumping  to 
second-tier  cities  from  the  get-go,  in  an  attempt  to  sidestep 
the  rush  and  hassles  of  setting  up  shop  in  a  major  metropo¬ 
lis.  “You  can  take  some  of  the  best  practices  from  India  and 
look  at  second-tier  cities  to  set  up  a  large  center,”  says  Juan  F. 
Ferrara,  chief  operating  officer  for  the  Americas  for  India- 
based  IT  service  provider  Genpact.  “You’re  already  seeing 
that  in  Brazil  and  Argentina.. .where  [companies]  are  already 
in  second-  and  third-tier  cities.” 

VENDORS  DIVIDE, 

CONQUER AND  EXPAND 

They’re  cash-rich.  They  have  high  market  valuations.  And 
they’re  hungry  for  customers.  They’re  the  industry’s  lead¬ 
ing  providers,  and  you  can  expect  them  to  gobble  up  smaller 
competitors  in  2008. 

Tier-two  providers  like  ACS,  Perot  Systems  and  others 
have  struggled,  unable  to  attain  the  double-digit  growth  of 
global  providers  and  lacking  the  scale  of  IBM  or  EDS.  As  a 
result,  they  will  become  acquisition  targets  for  larger  provid¬ 
ers  or  private  equity  firms,  says  NeoIT. 

U.S.-based  providers  may  be  more  likely  than  their  off¬ 
shore  brethren  to  acquire  midsize  providers.  Wipro  got 
attention  last  year  for  its  purchase  of  U.S.-based  infrastruc¬ 
ture  service  provider  Infocrossing,  but  caution  will  rule  the 
day  for  Indian  vendors  in  2008.  They’ll  be  unlikely  to  pur¬ 
chase  a  vendor  with  more  than  $1  billion  in  annual  revenues, 
posits  NeoIT. 

Indian  IT  service  providers,  however,  will  continue  to 
set  up  local  delivery  service  centers  in  the  U.S.,  Europe 
and  Latin  America,  says  outsourcing  adviser  EquaTerra. 
Likewise,  American  and  European  service  providers  will 


Your  data  center  hardware 
requirements  are  growing  every  day. 

With  ZT  Systems,  you  get  validated,  high-quality  servers  featuring 
the  Quad-Core  Intel®  Xeon®  processor  5400  Series  for  maximum 
performance  and  efficiency  -  but  that’s  only  part  of  the  solution.  ZT 
Systems  now  offers  customizable  programs  designed  to  enable  the 
ultimate  in  value  and  ease  of  implementation  for  organizations 
operati ng  i nf rastructu re-sca le  data  centers. 


Leading  Edge  Technology  -  Innovative  solutions  from  ZT  Systems  address  the  critical 
challenges  faced  by  data  centers  today.  ZT  servers  feature  high  efficiency  power  supplies  for 
cost  savings  and  improved  thermal  performance,  and  our  innovative  twin  node  servers  enable 
an  unprecedented  combination  of  density  and  value,  with  two  discreet  server  motherboards  in 
a  1U  chassis. 

Custom  Hardware  and  Integration  -  ZT  Systems  works  with  data  center  management  to 
determine  the  right  mix  of  technologies  and  platforms  for  your  environment.  We  set  up 
customized  stable  platform  programs  to  extend  product  lifecycles,  improve  consistency,  and 
drive  down  total  cost  of  ownership. 

Customized  Service  and  Support  -  ZT  Systems  extends  a  flexible  range  of  service  and 
support  offerings  designed  for  data  centers.  From  full  service  support  to  customized  options  for 
clients  with  internal  support  resources,  ZT  develops  specialized  programs  tailored  to  meet  your 
specific  requirements. 

Custom  Logistics  -  Custom  logistics  options  from  ZT  Systems  are  designed  to  increase  data 
center  procurement  efficiency.  From  custom  packaging  and  palletization  to  enhanced  RA 
procedures  and  extranets,  ZT  solutions  speed  server  implementation  and  reduce  internal  costs. 

Maximum  Cost  Effectiveness  -  ZT  is  committed  to  providing  value  added  price  leadership 
within  the  high-volume  server  segment.  Our  operational  efficiencies  mean  cost  advantages  for 
you,  with  recent  comparisons  yielding  substantial  savings  over  equivalent  configurations  from 
other  major  manufacturers. 


ZT  Systems  is  a  contributing  member 
of  The  Green  Grid,  a  consortium  of 
information  technology  companies 
and  professionals  seeking  to  lower 
the  overall  consumption  of  power  in 
data  centers  around  the  globe.  With 
server  solutions  designed  from  the 
ground  up  for  energy  efficiency,  ZT 
Systems  empowers  data  center 
management  to  optimize  density  and 
power  consumption  -  and  lower  cost 
of  ownership  and  operation. 
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Outsourcing 


CIOs  want  more  than  cost  savings. 

They  want  access  to  great  talent  *  vertical  expertise ,  process 
maturity,  flexibility— the  great  and  powerful  "value  add/' 


continue  expanding  their  offshore  presence  to  remain  price 
competitive.  PA  Consulting  Group  predicts  the  emergence  of 
more  alliances  between  Western  and  Indian  companies  this 
year  as  well. 

India  will  remain  the  market  leader  in  offshore  IT  ser¬ 
vices  for  the  foreseeable  future.  However,  clients  are  looking 
beyond  the  subcontinent  for  alternatives  as  that  market 
struggles  with  wage  inflation,  talent  attrition  and  infrastruc¬ 
ture  strains.  Some  companies  with  captive  centers  in  Banga¬ 
lore  worry  that  the  costs  there  could  equal  what  they’d  spend 
at  home  within  five  years,  according  to  NeoIT.  “As  India 
becomes  more  and  more  mature,  you  have  to  look  at  other 
pieces  of  the  world  in  terms  of  outsourcing,”  says  Nortel’s 
Bandrowczak,  who’s  interested  in  Eastern  Europe,  China 
and  Vietnam. 

In  fact,  2008  could  be  the  biggest  year  to  date  of  expan¬ 
sion  of  IT  service  delivery  capabilities  beyond  India.  Think 
Latin  America,  Central  and  Eastern  Europe,  China,  and  to  a 
lesser  degree,  the  Middle  East  and  Africa. 

While  India  has  been  the  hub  of  the  outsourcing  universe 
for  the  past  five  years,  alternative  locations  around  the  world 
have  been  quietly  investing  in  the  necessary  infrastructure 
(roads,  airports,  telecommunications,  education)  to  attract  IT 
and  business  process  services,  says  NeoIT.  That’s  good  news 
for  customers  who  suffered  through  India’s  growing  pains  if, 
indeed,  these  emerging  locations  can  leapfrog  India  on  those 
issues.  Of  course,  none  of  these  new  offshore  destinations, 
with  the  exception  of  China,  has  the  potential  scale  of  India. 
But  for  now,  the  intent  is  to  supplement  India,  not  replace  it. 

THE  NEW,  NEW  DEALS 

Forget  cost  cutting  and  efficiencies.  Outsourcers  are  going 
to  pitch  themselves  as  partners  in  business  transformation. 
It’s  certainly  not  a  new  sales  pitch  from  providers  (read 
“What  Does  It  Take  to  Get  IT  Outsourcers  to  Innovate?”  at 
www. cio. com/article/144400).  But  this  time  they  mean  it,  say 
analysts. 

They’d  better.  CIOs  want  more  than  cost  savings.  They 
want  access  to  great  talent,  vertical  expertise,  process 
maturity,  flexibility— the  great  and  powerful  “value  add.” 

IT  buyers  want  an  outsourcing  provider  that  can  actually 
enhance  the  client’s  revenues  and  not  just  its  own,  says  PA 
Consulting. 

“Companies  are  realizing  that  an  IT  outsourcing  con¬ 
tract  is  valid  for  about  as  long  as  it  takes  the  ink  to  dry  on 
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the  signature  page,”  says  Shawn  Fields,  vice  president  of 
solutions  outsourcing  at  Optimus  Solutions.  “Vendors  who 
understand  this  and  build  flexibility  into  their  contractual 
structure  that  allows  their  clients  to  change  services  will  find 
themselves  distancing  their  companies  from  their  competi¬ 
tors.  Innovation  will  emerge  as  a  deciding  factor  for  ITO  [IT 
outsourcing]  competitors.” 

Even  in  areas  that  are  typically  cost-centric,  like  offshore 
application  development  and  maintenance,  the  emphasis 
will  shift  from  pure  labor  arbitrage  projects  to  higher-value 
work  such  as  process  improvement  and  application  portfolio 
rationalization,  according  to  the  Everest  Research  Institute. 

The  catch,  of  course,  is  you’ll  have  to  pay  more.  Forrester 
Research  notes  that  rates  for  consulting  services  are  already 
on  the  rise,  and  warns  that  IT  service  buyers  can  expect 
to  spend  more  on  outsourcing  services  while  deciphering 
which  market  changes  warrant  the  upcharges  and  which 
don’t. 

One  area  ripe  for  some  innovation  is  the  call  center.  These 
deals  are  the  most  mature  segment  of  the  offshore  outsourc¬ 
ing  industry.  And  yet.. .they’re  not.  Clients  have  become  dis¬ 
satisfied  with  the  sweatshop  mentality  that  leads  to  turnover 
levels  from  60  percent  to  150  percent  a  year,  says  NeoIT. 

CIOs  and  other  IT  decision  makers  are  demanding 
improvement.  And  providers  are  beginning  to  respond  by 
creating  more  “client-centric”  solutions,  such  as  unique 
scripts  and  efforts  to  connect  employees  to  the  client’s  corpo¬ 
rate  culture.  NeoIT  predicts  that  call  center  operators  will  up 
the  ante  in  2008  by  assessing  new  locations  and  allocating 
personnel  to  customer-specific  solution  centers  instead  of 
having  massive  pools  of  personnel  taking  calls  for  multiple 
clients. 

Although  “green”  IT  services  have  been  little  more  than 
marketing  hype  to  date,  the  trend  will  take  root  and  become 
measurable  and  attainable  in  2008,  says  NeoIT.  While  that’s 
debatable,  one  thing  is  certain:  Interest  is  going  to  increase 
among  outsourcing  customers  this  year.  More  than  21  per¬ 
cent  of  publicly  traded  companies  that  outsource  added 
“green  policies  and  performance”  demands  to  their  vendor 
contracts  last  year,  and  94  percent  plan  on  adding  such 
clauses  during  renegotiations,  according  to  the  Brown  Wil¬ 
son  Group. 

That  may  light  a  fire  under  outsourcing  providers  to 
decrease  their  carbon  footprints  by  creating  greener  data 
centers,  investing  in  environmentally  friendlier  buildings 


pphcations  oh  VoIP 


Screaming  at  the  IT  guy  because  you  can't  get  dial  tone 


What's  worse  about  your  phone  system:  not  having  dial  tone,  or  having  nothing  but  dial  tone? 
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Outsourcing 


Big  outsourcing  deals  won*t  disappear. 

Instead*  the  focus  will  be  on  their  renewals  and  negotiotions. 
So  outsourcers  will  take  off  the  pricing  gloves  to  woo  clients 
away  from  their  incumbent  providers. 


and  campuses,  and  developing  eco-friendly  processes  and 
policies. 

This  is  an  area  where  smart  small  to  midsize  IT  service 
firms  will  put  a  stake  in  the  ground.  “A  smaller  player  can 
be  audited  more  easily,  can  take  carbon-reduction  measures 
more  easily  and  can  be  more  flexible  about  changing  tradi¬ 
tional  practices,”  says  U.K.-based  outsourcing  researcher 
Mark  Kobayashi-Hillary.  “It  could  be  a  great  source  of  mar¬ 
ket  differentiation.” 

Also  on  the  uptick  is  remote  infrastructure  management 
outsourcing.  Offsite  management  of  servers,  databases, 
networks  and  security,  and  applications  isn’t  new.  But  this 
may  be  the  year  when  buyers  really  grasp  this  alternative 
to  traditional  big-bang  infrastructure  outsourcing  arrange¬ 
ments.  Asset-light  deals— so  called  because  the  provider 
does  not  take  on  the  assets  such  as  the  client’s  data  centers  or 
desktops  as  part  of  the  contract— will  increase  as  clients  get 
used  to  the  idea  that  the  “command  and  control”  center  can 
be  physically  removed  (and  in  the  case  of  the  increasingly 
offshored  option,  very  far  removed)  from  the  actual  data  cen¬ 
ter,  analysts  say. 

To  date,  this  segment  of  the  outsou  rcing  market  has  been 
growing  at  about  20  percent  a  year,  according  to  NeoIT.  The 
Everest  Research  Institute  predicts  this  market  will  continue 
its  pace  of  60  percent  to  70  percent  growth  in  2008.  An  eco¬ 
nomic  downturn  in  the  U.S.  could  also  fuel  greater  demand 
for  the  lower-cost  infrastructure  outsourcing  option.  And, 
according  to  some  consultants,  the  transitions  can  happen 
on  the  fly:  Most  data  centers  and  network  operating  centers 
are  managed  with  a  common  set  of  tools,  service  providers 
already  possess  operational  expertise  in  them,  and  adap¬ 
tation  to  any  client-specific  needs  can  happen  relatively 
quickly,  says  NeoIT. 

Asset-light  deals  could  be  a  boon  for  IT  service  providers, 
as  the  profit  margins  are  better  than  the  traditional  infra¬ 
structure  outsourcing  model.  However,  there  is  a  downside 
for  vendors.  An  asset-light  deal  brings  in  up  to  70  percent 
less  in  total  contract  value  to  the  provider 
than  the  traditional,  assets-included 
deal,  says  Everest  Research  Institute.  Net 
result:  better  profit  margins,  but  less  top¬ 
line  growth.  Those  in  the  know  say  it’s 
the  wave  of  the  future.  As  a  result,  tradi¬ 


Outsourcing  Resources 


For  more  on  OUTSOURCING,  read  “ABC: 
An  Introduction  to  Outsourcing”  at  www 
.cio. com/article/40380. 

cio.com 


tional  infrastructure  outsourcing  will  itself  show  a  decline... 
but  not  until  2010,  says  Everest. 

Speaking  of  declines,  the  death  of  the  outsourcing  mega¬ 
deal— those  $1  billion-plus  contracts  that  get  the  most  atten¬ 
tion  from  the  media— has  been  portended  for  three  years 
now.  But  this  may  be  the  year  those  predictions  come  true. 

Why?  It’s  simple.  “Few  Fortune  100  companies  remain 
that  could  sign  new  megacontracts,”  says  Ross  Tisnovsky, 
vice  president  of  IT  outsourcing  research  at  Everest 
Research  Institute. 

Of  course,  big  outsourcing  deals  won’t  disappear.  The 
focus  will  be  on  their  renewals  and  renegotiations,  and  out¬ 
sourcers  will  take  the  pricing  gloves  off  to  woo  clients  away 
from  their  incumbent  providers. 

“We  expect  buyers  will  gain  pricing  benefits  due  to  the 
pressure  suppliers  will  have  to  grow  signings  and  contend 
with  increased  competition  for  contract  renewals,”  says  Tis¬ 
novsky.  “We  also  foresee  long-term  price  decline  in  the  [large 
enterprise]  infrastructure  outsourcing  market  due  to  an 
influx  of  new  suppliers  and  increased  competition.” 

OUTSOURCING  BUYERS  GET 

SMART(ER) 

In  2008,  many  outsourcing  customers  will  be  entering  third- 
and  fourth-generation  outsourcing  contracts— either  renew¬ 
ing,  rebidding  or  restructuring  their  deals.  And  according  to 
PA  Consulting,  many  of  those  IT  organizations  have  honed 
their  internal  capabilities  for  vendor  management  and  gov¬ 
ernance  over  the  years.  That  maturity  means  they’re  making 
smarter  decisions,  negotiating  better  terms,  demanding  better 
business-driven  metrics  and  getting  better  at  outsourcing 
lifecycle  management.  They  may  also  start  to  create  contract 
terms  that  shift  more  of  the  risk  to  their  IT  service  vendors, 
says  NeoIT. 

Of  course,  there  will  be  plenty  of  new  entrants  to  the  out¬ 
sourcing  market  in  2008  that  may  choose  to  learn  their  own 
outsourcing  lessons  the  hard  way.. .and  plenty  of  challenges 
in  this  dynamic  market  to  test  the  veter¬ 
ans’  hard-won  skills  as  well.  QE3 


Senior  Editor  Stephanie  Overby  can  be 
reached  at  soverby@cio.com.  To  comment  on 
this  story,  go  to  www.cio.com/article/166108. 
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The  IT  learning  investments 
you  cultivate  today 
are  the  ones  you  ll 
benefit  from  tomorrow. 


Get  it  right. 


Chances  are,  a  few  of  the  seeds  you’ve  planted  in  IT  learning  solutions  haven’t  delivered 
the  kind  of  growth  you’d  hoped  for.  Which  means  you  didn’t  plant  them  at  Learning  Tree. 
Because  98%  of  our  students  report  our  courses  prepared  them  as  well  or  better  than  others 
when  it  comes  to  making  an  immediate  impact  in  the  technical  workplace.  Some  might  credit 
our  immersive,  hands-on  learning  environment.  Others  might  say  it’s  the  real-world  IT  experi¬ 
ence  of  our  instructors.  Either  way,  we  consistently  deliver  an  environment  of  rapid  growth  and 
results,  making  your  investment  in  Learning  Tree  IT  Courses  as  solid  as  an  oak.  To  learn  more, 
contact  us  today. 


Si  Learning  Tree 


www.GetT rainingRight.com/cio 

888-761-TREE 


IT,  Technology  and  Management  Training 


The  Strategic  CIO 


Howto  Remodel 

} 

Your  IT  Shop 

The  CIO  of  home  improvement  retailer  Kingfisher  had  to  optimize  operations 
and  give  business  leaders  a  strong  voice  in  IT  governance  before  he  could 
innovate  with  technology 


ur  change  journey  at  Kingfisher,  the  world's  third- 

largest  home  improvement  retail  organization,  began  three  years 
ago,  when  we  started  to  transform  distributed  line-of-business  IT 
functions  into  a  centralized,  global  organization.  Like  any  journey, 


there  are  stages.  This  one  had  three.  First,  we  had  to  optimize  operational  effi¬ 
ciency,  then  revamp  our  IT  governance  process.  Then,  finally,  we  were  able  to  begin 


using  technology  to  drive  business  innovation. 

As  with  most  CIOs  coming  into  a  new  company, 
my  initial  challenge  was  to  optimize  operational  effi¬ 
ciency.  I  started  by  listening  to  everybody.  I  heard 
from  business  leaders  and  IT  staff,  of  course,  but  I 
also  went  out  to  help  run  stores,  sit  on  the  trucks, 
stand  behind  the  cash  register  and  face  the  custom¬ 
ers  at  the  service  desk.  The  front  line  is  where  we 
need  to  earn  our  respect  as  new  CIOs,  especially  if 
we’re  going  to  instigate  major  enterprise  change. 

I  saw  what  our  IT  expenses  were  across  our  11 
markets,  and  made  sure  our  spending  became  more 
transparent  to  company  leaders.  We  had  significant 
diversity  in  our  IT  infrastructure  and  applications, 
which  needed  to  be  better  leveraged  and  made  ready 
for  changes  in  how  our  customers  were  shopping- 
especially  regarding  their  use  of  multiple  channels. 


It  took  us  a  whole  year  to  get  the  basics  right,  earn 
the  hearts  and  minds  of  key  business  leaders  and  get 
the  right  people  on  the  bus.  We  changed  a  large  part 
of  the  existing  IT  leadership.  We  gained  trust  among 
end  users  by  fixing  basic  operational  issues,  such 
as  the  stability  of  our  point-of-sale  system.  And  we 
saved  money:  Among  our  cost-cutting  initiatives,  we 
delivered  a  25  percent  savings  by  getting  our  vendors 
to  standardize  pricing  across  geographies  based  on 
the  lowest  price  we  were  being  charged. 

The  next  part  of  the  journey  was  to  align  IT  with 
the  business.  In  retail,  alignment  means  using  IT  to 
leverage  our  capabilities  across  different  channels— 
increasing  sales  and  providing  new  opportunities  for 
the  store  brands— while  at  the  same  time  using  less 
capital.  For  six  months  we  built,  challenged,  debated 
and  enhanced  our  target  architecture. 
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Samsung  Solid  State  Drive 

all-Flash  drives  available 
in  notebooks  and  consumer  electronics 


weight  (2.5”  SATA-II  SSD) 

73g 

endurance  (MTBF‘)  > 

2  million  hours 

shock  resistance 

1500G/ 0.5ms 

read  speed 

100MB /s 

write  speed 

80MB /s 

active  power  consumption 

1W 

operating  temperature 

-25C  -  85C 

www.sarmsungssd.com 


solid  state  reliability 


Introducing  the  new  Samsung  Flash  Solid  State  Drive  (SSD). 

No  moving  parts,  except  some  hardworking  electrons.  A  Mean  Time 
Between  Failures  (MTBF)  almost  three  times  longer  than  a  hard  drive. 
Exceptional  shock  resistance.  And  power  use  that  extends  battery 
life  up  to  20%.  With  a  Samsung  SSD  inside  your  notebook,  your 
data  is  always  there  when  you  need  it. 


as 


is#* 


’Mean  Time  Between  Failures 
©  2008  Samsung.  All  rights  reserved. 


■■■The  Strategic  CIO  FULFILLING  THE  ROLE'S  NEW  MANDATE 


Three  Faces  of  Change 

To  discover  what  is  possible,  to  communicate  that  vision  and  to 

motivate  people  to  change,  you  need  to  play  three  CIO  roles: 

a  Coming  into  a  new  company,  you  must  optimize  operational 
efficiency  and  make  IT  spending  transparent  In  this  role, 
you’re  the  Cheap  Information  Officer,  concerned  with  costs. 

»  When  it  comes  to  aligning  IT  with  the  business  and  its  goals, 
you  become  a  traditional  Chief  Information  Officer,  position¬ 
ing  yourself  and  your  senior  team  as  business  partners. 

•  Once  you  have  earned  credibility  and  become  a  trusted  busi¬ 
ness  partner,  you  are  positioned  to  play  the  third  role,  that  of 
Chief  Innovation  Officer.  Only  then  can  you  start  to  innovate  and 
explore  the  possibilities  to  create  new  sustainable  value.  -J.V. 


These  exercises  culminated  in  the  creation  of  one 
IT  entity— singular  in  architecture,  operating  model 
and  staff— to  serve  Kingfisher’s  brands  in  Europe 
and  Asia.  We  transferred  several  hundred  IT  staff 
members,  who  were  assigned  to  the  local  businesses 
and  geographies,  into  a  group-wide  function  called 
Kingfisher  IT  Services  (KITS). 

The  Road  to  Innovation 

Of  course  business  leaders  were  concerned  about 
losing  their  dedicated  IT  teams.  But  we  built  a  new 
governance  structure  to  ensure  that  our  senior  exec¬ 
utives  would  drive  IT  decision  making.  Although 
I  facilitate  this  group,  they  make  the  decisions  on 
staff,  services  and  processes.  Instead  of  the  CIO 
pushing  and  pulling,  they  own  that  agenda  and  they  take  it 
further  than  I  could  by  myself. 

Our  governing  body  is  named  the  IT  Executive  Board 
(ITxB).  It  is  chaired  by  one  of  our  executive  directors  and  has 
seven  managing  directors  or  operating  company  board  mem¬ 
bers  who  meet  at  least  quarterly.  Under  the  new  governance 
structure,  we  unified  our  previously  diverse  IT  strategies.  The 
ITxB  members  debated  and  decided  on  the  Kingfisher  enter¬ 
prise  architecture— that 
is,  the  most  relevant 
business  processes  and 
data— which  became  the 
KITS  operating  model. 

Having  become  a 
credible  IT  officer  and 
a  trusted  business  part¬ 
ner,  I  was  finally  able  to 
start  exploring  the  pos¬ 
sibilities  for  creating  new  value  and  begin  stretching  the  com¬ 
pany  into  emerging  areas  such  as  multichannel  retailing  and 
home  installation  services.  While  change  can  be  an  aspect  of 
any  IT  transformation,  it’s  at  this  innovation  stage  that  major 
change  becomes  a  possibility. 

For  example,  we  have  refreshed  all  of  the  processes  and 
systems  in  our  Brico  Depot  stores,  simplifying  each  process 
according  to  two  goals:  getting  closer  to  our  customers  and 
creating  a  more  dynamic  supply  chain.  Because  of  our  single 
integrated  system  and  one  view  of  the  truth,  our  staff  now  has 
real-time  and  accurate  information  about  inventory  positions 
available  via  PDAs,  and  we  can  log  orders  for  customers  any¬ 
where  in  the  store  using  wireless  and  mobile  technology. 

Lessons  of change 

There  are  a  number  of  lessons  that  emerge  from  this  change 
effort  and  others  I’ve  been  part  of: 

■  Be  humble.  Recognize  when  you  or  your  team  makes  a 


mistake;  own  up  to  it  and  learn  from  it. 

■  Pace  yourself.  One  of  the  most  common  errors  is  trying  to 
change  too  fast.  Sure,  some  business  colleagues  will  get  frus¬ 
trated  and  want  you  to  go  faster.  But  you  have  to  set  a  pace  that, 
although  a  stretch,  is  still  achievable.  You  will  know  the  pace 
to  set  by  looking  at  the  culture  you  are  working  in. 

■  Put  the  team  first.  As  CIO  you  have  to  do  the  heavy  lifting 
at  the  beginning,  but  for  change  to  be  achievable  and  sustain¬ 
able,  the  team  must  own  it  and  make  it  happen. 

Teams  can  only  work  effectively  if  they  have  a  clear,  shared 
mandate  that’s  wrapped  in  the  value  you  intend  to  create 
for  the  customer  or  shareholders.  At  times  people  may  say, 
“You  are  the  leader,  you  tell  us  where  to  go.”  But  you’ll  be 
more  effective  as  a  catalyst,  defining  the  challenges  and  the 
opportunities  for  the  group. 

Focusing  on  your  team  also, keeps  you  modest  (it’s  not  all 
about  you)  and  humane  (you  will  lose  your  team  if  you  mis¬ 
treat  people). 

■  Don’t  ignore  IT  operations.  Operations  is  your  bread  and 
butter,  and  you  need  to  keep  an  eye  on  it.  Make  sure  you  have 
a  strong  team  to  which  you  can  delegate  day  to  day  manage¬ 
ment.  IT  operations  have  to  run  like  a  Swiss  clock  or  your 
change  efforts  will  grind  to  a  halt. 

I’m  lucky  to  be  respected  and  empowered  to  enable  change.  I 
see  a  lot  of  CIOs  who  have  tense  relationships  with  their  CEOs 
or  CFOs.  They  are  mired  in  cost  cutting  and  in  complaints 
about  services. 


Jean-Jacques  Van  Oosten  is  group  IT  director  at 
Kingfisher  and  a  member  of  the  CIO  Executive 
Council.  To  comment  on  this  article,  go  to  www 
.cio.com/article/178450 . 


More  Strategic  Advice 


WATCH  CIOS  DISCUSS  LEADERSHIP 
on  video  at  www.cio.com/video/ 
outlookseries. 

For  more  tools  on  STRATEGIC  CIO 
LEADERSHIP  COMPETENCIES,  visit 
www.cio.com/cec/strategic_cio/. 


cio.com 


If  you  are  in  that  position,  you  will  not  be  consulted  on  the 
change  agenda  in  the  wider  arena  of  your  company.  You’ll  be 
part  of  somebody  else’s  strategy  instead  of  crafting  the  strategy 
yourself.  QQ 
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I  am  fearless. 


I  protect  a  2  billion  dollar  retail  business. 

I  believe  security  should  enable 
business  growth  not  limit  it. 

I  focus  on  what’s  important. 

I  lead. 


I  innovate. 

I  win. 

I  am  fearless.” 


When  it  comes  to  security,  most  businesses  understand  what  it  means  to  fail.  But  few  can  imagine 
what  it  would  mean  to  succeed.  RSA’s  information-centric  security  solutions  can  move  your  business 
forward.  That’s  why  we’re  the  chosen  security  partner  of  more  than  90  percent  of  the  Fortune  500. 


Don’t  just  secure  your  business.  Accelerate  it.  Learn  more  at  www.rsa.com/go/kayak  The  Security  Division  of  emc 


Secure  Anytime  Protect  Secure  Manage  Compliance 

Anywhere  Access  Customer  Identities  Enterprise  Data  and  Security  Information 


©2007  RSA  Security  Inc.  All  rights  reserved.  RSA  and  the  RSA  logo  are  either  registered  trademarks  or  trademarks  of  RSA  Security  Inc.  in  the  United  States  and/or  other  countries. 

All  other  products  and  services  mentioned  are  trademarks  of  their  respective  companies. 
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Executive  Programs 

where  you  need  to  be 

CIO  Executive  Programs  combine  cutting-edge  education  and  networking  opportunities  for 
busy  executives.  Our  programs  attract  the  best  and  brightest  IT  executives  and  our  brand 
is  synonymous  with  the  highest  quality  and  integrity.  These  face-to-face  conferences  are 
regarded  as  the  trusted  networking  resource  for  the  nation’s  CIOs  because  we  know  and 
understand  the  executive  IT  community  better  than  any  other  IT  resource. 


CSO  Perspectives 

March  16-18,  2008 
InterContinental  Buckhead 
Atlanta,  Georgia 

CIO  Perspectives 

April  1 0,  2008  -  New  York,  New  York 
September  25,  2008  -  San  Francisco,  California 

The  CIO  Pocket  MBA 

April  14-18,  2008 

Boston  University  School  of  Management 
Boston,  Massachusetts 

CIO  Leadership  Event 

May  18-20,  2008 
Sheraton  Boston 
Boston,  Massachusetts 

CIO  &  CSO  Business  Continuity  Forum  2008 

July  15-16,  2008 

The  New  York  Marriott  at  the  Brooklyn  Bridge 
New  York,  New  York 


CIO  100  Symposium  &  Awards 

August  24-26,  2008 
The  Broadmoor 
Colorado  Springs,  Colorado 

Digital  ID  World 

September  8-10,  2008 
Hilton  Anaheim 
Anaheim,  California 

CIO|09  The  Year  Ahead 

November  9-1 1 , 2008 
Loews  Coronado  Bay 
San  Diego,  California 


Kjpmif.' 

For  more  information 
and  to  register  visit: 

www.cio.coni/conference8 
or  cal  800-36041246 
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GONE  94%  MOBILE 

US.  companies  using  at  least  one  mobile  data  application. 


(In-Stat) 


INVESTING  IN  EFFICIENCY 

Companies  will 

spend  12°/o 

more  on  supply  chain 
technologies  this 
year  than  they 
did  in  2006. 

(AMR  Research) 


Cost  Conscious  in  a  Slowdown 

What  drives  your  investment  decisions: 

ROI  or  Total  Cost  of  Ownership? 


ROIB  TCQI 


2007 

2008 


68% 


1 33% 


59% 


41% 


(CIO.com) 


IS  VISTA  STABLE? 


51% 


IT  decision  makers  using  or  considering  Vista 
who  worry  about  its  bugs. 

(CDW/Waiker  Information) 


Who  Manages  Virtualization? 


>%  of  enterprises  are 
creating  a  virtualization  management  group 
inside  server  and/or  storage  teams, 

Only  15%  are  creating  virtual  computing 
teams  with  experts  from  across  IT. 

(I  DC) 


HAPPY, 

BUT  GETTING  WORRIED 

73% 

of  IT  workers 
like  their  jobs. 

22% 

worry  about  losing  them. 

(Hudson  Employment  Index) 


MORE  WANT  HOSTED  APPS 


37% 


of  large  and  small  companies  plan  to 
deploy  software  as  a  service. 


(ThinkStrategies/Cutter  Consortium) 
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Veri70nwireless 

When  it  comes  to 
email  solutions  for 
your  small  business, 

who's  your"go-to"guy? 


0  Your  Daughter 


□  Your  Golf  Buddy 

[]  Your  3rd  Cousin  Once  Removed 


'^’he  Verizon  Wireless  Network 


Verizon  Wireless  SMT5800  BlackBerry®  Verizon  Wireless  XV6800 

Pearl™ 


When  you're  ready  to  choose  email  solutions  for  your  small 
business,  turn  to  the  experts  at  Verizon  Wireless.  We'll  make 
it  easy  to  get  the  right  devices.  The  right  plan.  The  right  price 
And  the  security  of  America's  most  reliable  wireless  network. 


To  learn  more  about  our  wireless  solutions,  consult  with  your  dedicated  small  business  representative. 
Call  1.800.VZW.4BIZ  Clickverizonwireless.com/smallbusiness  Visit  your  local  Verizon  Wireless  store 

Screen  images  simulated.  See  verizonwireless.com/bestnetwork  for  details.  ©2008  Verizon  Wireless. 


Xerox  Global  Services  professionals  can  transform  your 
firm’s  document  processes  to  create  revenue  while  driving  up 
productivity.  Result?  Improved  top  and  bottom  lines. 

There’s  a  new  way  to  look  at  it. 


Organizations  waste  millions  on  managing  the  flow  of 
documents  from  digital  to  paper  and  back  again.  Xerox 
Global  Services  professionals  create  efficiencies  by 
streamlining  those  processes,  upgrading  document 
technologies  and  finding  better  ways  for  people  and 
their  resources  to  work  together.  For  example,  our 
document  assessments  examine  workflow  and  technology 

xerox.com/millions  1-8OO-ASK-XEROX 


compatibility  across  your  enterprise.  Once  our  analysis 
is  done,  we  offer  a  comprehensive  range  of  document 
services  and  outsourcing  to  optimize  your  assets  and  improve 
business  performance.  Our  methods  have  helped  Owens 
Corning,  InterContinental  Hotels  Group  (IHG)  and  others 
realize  millions.  For  a  complete  portfolio  of  our  services 
and  case  studies,  visit  us  today  at  xerox.com/mitlions. 
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